149 applicants

Company

Original Job Post

BusPatrol · 1 week ago

Application Security Engineer

Remote

Full-time

Remote

Mid Level

3+ years exp

Wonder how qualified you are to the job?

Education

H1B Sponsorship

Insider Connection @BusPatrol

Discover valuable connections within the company who might provide insights and potential referrals, giving your job application an inside edge.

Responsibilities

Develop, maintain, and socialize secure coding guidelines and best practices

Work with developers to assist in designing and architecting secure systems

Triage and fix vulnerabilities in code

Maintain third-party dependencies to ensure they are up to date

Perform code reviews and application security assessments

Collaborate with developers to enhance security practices

Work with AWS Serverless technologies

Maintain up-to-date knowledge on the latest security technologies & standards

Be a security subject matter expert and respond to any internal security engineering questions/requests

Work with other teams to help architect solutions that are inherently secure

Correctly balance security risk and product advancement

Develop general techniques and frameworks that will enable engineering teams to find flaws before they are introduced into production

Support design and maintenance of the cloud security environments, with a strong focus on AWS

Qualification

Application SecurityWeb Application SecurityOWASPDockerGithubRuby on RailsPythonJavaScriptSCASASTDASTAWS Serverless ComputingInfrastructure-as-CodeIoT SecurityOSCPGWAPTSOC 2

Required

BS in Computer Science or equivalent experience

3-5 years of software development experience

2+ years of application security experience strongly preferred

Demonstrable knowledge of web application security

Familiarity with Docker and Github

Understanding of frameworks such as OWASP

Ability to work independently and collaboratively, and set your own goals

Excellent analytical skills: able to break down complex, multi-faceted problems into actionable steps without over-simplification.

Ability to communicate security-related concepts to a broad range of technical and non-technical staff in an articulate manner

Preferred

2+ of those in application security preferred

Experience programming with Ruby on Rails, Python and JavaScript

Experience with SCA, SAST and DAST tools

AWS Serverless Computing experience (Lambda, Step Functions, Fargate)

Infrastructure-as-Code experience (CDK, Terraform)

IoT and embedded security experience

OSCP, GWAPT or other relevant security certification

Familiarity with SOC 2 or other compliance frameworks

Company

BusPatrol

BusPatrol is a safety technology company that develops partnerships, educate communities, and deploy Smart Bus technology.

Founded in 1995

Lorton, Virginia, USA

201-500 employees

http://buspatrol.com/

H1B Sponsorship

BusPatrol has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)

Distribution of Different Job Fields Receiving Sponsorship

Trends of Total Sponsorships

2023 (1)

2022 (1)

2021 (3)