What are the responsibilities and job description for the Senior Application Security Engineer position at Next Gen IT Inc?
Job Details
Senior Application Security Engineer
Location: 80 Maiden Lane, New York, NY 10038
Exp: 15 yrs
Interview: WILL REQUIRE IN-PERSON INTERVIEWS
Mandatory Skills/Experience
12 years of experience in application security, with a proven track record of conducting vulnerability assessments, penetration testing, and secure code reviews.
Extensive experience in secure application development, including knowledge of security frameworks like OWASP Top 10, and the ability to guide development teams in implementing secure coding practices.
Proficiency in Software Composition Analysis (SCA) tools (e.g., Veracode, AppSec) for identifying and managing vulnerabilities in open-source libraries and third-party components.
Advanced knowledge of static and dynamic application security testing (SAST/DAST) tools (e.g., Veracode, AppSec, Burp Suite) and integrating these tools into CI/CD pipelines for automated security checks.
Strong cloud security expertise, including securing applications and workloads on AWS, Azure, or Google Cloud Platform, and experience with Web Application Firewalls (WAF) and cloud-native security services.
Additional Qualifications:
Certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), Certified Cloud Security Professional (CCSP), or GIAC Web Application Penetration Tester (GWAPT) are highly preferred.
Knowledge of compliance standards like NIST, PCI-DSS, and GDPR and how they apply to application security.
