26 applicantsPosted by Agency

Company

Original Job Post

RocketPower · 2 days ago

Director of Application Security

New Jersey, United States

Full-time

Onsite

Director

7+ years exp

Wonder how qualified you are to the job?

Maximize your interview chances

ConsultingEmployment

Insider Connection @RocketPower

Discover valuable connections within the company who might provide insights and potential referrals, giving your job application an inside edge.

Responsibilities

Develops and implements IT Secure Application Development Life Cycle Policy.

Performs penetration testing, vulnerability scan, and code review of existing and new applications to improve software security.

Performs routine audits of existing applications to identify security gaps and proposes mitigating controls.

Provides expert advice and consultancy on application security, threat modeling, and fixing vulnerabilities.

Works closely with application development teams to provide security expertise on system, encryption, authentication, security-specific code, and governance.

Domain competencies in a number of IT-risk-related disciplines, including, Secure Applications Development, Cybersecurity, Applications Security Review, and Applications Security Audit.

Manages the implementation of Application Security policy and framework/tools.

Communicates application security issues/findings to stakeholders.

Provides consultative advice to information and application security customers that enables them to make informed risk management decisions.

Identifies and implements appropriate controls to effectively manage application risks as needed.

Ensures compliance with industry, regulatory, and client's defined policies and standards.

Identifies opportunities to improve risk posture, developing solutions for remediating or mitigating application risks and assessing the residual risks.

Maintains strong working relationships with individuals and groups involved in managing application risks across the organization.

Partner with multiple teams across multiple locations with varying sets of priorities to ensure a timely delivery of the secure application solution.

Clarify and drive project commitments as well as establish and maintain clear chains of accountability

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Application SecurityIT SecurityComplianceRisk ManagementData ProtectionSecurity ControlsHTMLC#JavaScriptJQueryPythonPHPJSONScalable Application SecuritySSL/TLSRESTSAMLOAuthAgile SDLCWaterfall SDLCSecurity Development Lifecycle (SDL)DevOps ToolsJiraConfluenceJenkinsGitHubBitBucketSourceforgeECommerce PlatformsSalesForce Commerce Cloud

Required

BS or higher degree in Computer science, Information Security, or equivalent experience

7+ years of professional experience in Application Security, IT security, compliance and risk management, including privacy, data protection, security controls, etc.

5+ years of hands-on development experience on the technologies and standards, such as: HTML, C#, JavaScript, JQuery, Python, PHP, JSON

Experience in building scalable application security organizations and successfully managing application security professionals

Understanding of SSL/TLS, REST, SAML, OAuth

Experience with either Agile or Waterfall SDLC methodologies

Experience in developing an SDL, training technical teams on security related topics: SDL, anti-patterns, vulnerability prevention

Experience using DevOps tools such as Jira/Confluence, Jenkins, and cloud-based code sharing platforms (i.e., GitHub, BitBucket, Sourceforge, etc.)

Working knowledge of eCommerce platforms such as SalesForce Commerce Cloud a plus

Understanding of Database Systems including MS SQL, MySQL, Oracle, etc is preferred

Experience with Agile/SCRUM and Classical (Waterfall) software development models, and thorough knowledge/understanding of enterprise SDLC process

Knowledge of web related technologies (web applications, web services, and service-oriented architectures) and of network/web related protocols

Preferred

Knowledge of the following application technologies and standards (not limited to but including): HTML, CSS, JavaScript, SQL, JSON, Python, XML, SSL/TLS, REST, SAML, OAuth, C#, PHP is preferred

Utility development and scripting experience is a major plus