Apply on Employer Site

Oreva Technologies, Inc. · 1 day ago

Senior Application Security Engineer

United States

Contract

Remote

Senior Level

Oreva Technologies, Inc. is seeking a Senior Application Security Engineer to join their information technology team. The role focuses on maturing software security practices by analyzing risks from vulnerabilities and implementing remediation strategies for applications and open-source libraries.

ConsultingIT ManagementManagement ConsultingSoftware

H1B Sponsor Likely

Responsibilities

Set up and operate software security testing techniques in conformity with the technical reference architecture and the companies security policies and guidelines

Conduct in-depth analysis of open-source threats and vulnerabilities (including zero-day), collaborate with engineering teams to evaluate and assess the impact of vulnerabilities on current code, including libraries, frameworks, and dependencies

Identify and prioritize high-risk open-source components within our codebase, considering factors such as exploitability, severity, and exposure

Develop and implement remediation and risk mitigation plans to address identified vulnerabilities

Coaching and hands on experience for code refactoring, patching, and dependency updates

Identify and recommend engineering design changes to help reduce vulnerabilities

Champion and evangelize secure coding practices with the engineering community

Develop and lead security reviews and drive innovative security remediation efforts

Provide technical designs for innovative software solutions to address security risks

Coaching and assisting in administration and configuring of security tools, documenting secure configurations

Serve as an Application security consultant and advisor for software engineering teams in assisting with secure coding best practices, threat detection, Software security vulnerabilities, security reviews, remediation recommendations throughout the delivery lifecycle

Building relationships and developing partnerships with engineering/development, security operations, enterprise and application architecture teams to mature Security Coding practices for the company owned applications and platforms

Stay informed about emerging threats and vulnerabilities in the open-source community, understanding impact of attacks, controls and mitigation measures in the application security space

Communicate project related security risks, control and remediation measures accurately and in a timely manner to stakeholders and impacted teams

Integrate and adhere with the defined development and delivery process/ Change Management, SLA Compliance, productivity and other enterprise goals

Serve as a thought leader, change agent and influencer within the enterprise providing feedback to leadership, engineering, architecture and security operation team members

Draw flowcharts, architecture diagrams, incident response strategies, and security roadmaps

Evaluate and improve security posture maturity

Work closely with CISO and security team to align development with enterprise security goals

No penetration testing—focus is on code-level security and posture improvement

Implement and manage secure coding practices across development teams

Conduct code vulnerability analysis and remediation (Java/JavaScript focus)

Create roadmaps and dashboards for security posture improvement

Lead POCs for security tools and recommend best-fit solutions

Collaborate with CISO and security leadership on cloud and application security strategy

Qualification

Application SecurityJavaJavaScriptVulnerability RemediationAWSSecure Coding PracticesStatic Security TestingOpen-source SecurityCode ReviewAnalytical MindsetLearning AttitudeCommunication SkillsProblem-solvingTeam Collaboration

Required

Good experience in Application security as well as a development Background

Hands-on expertise in analyzing risk from vulnerabilities and assessing their impact on custom applications and open-source libraries

Deep understanding of open-source vulnerability remediation

Practical experience in remediation for Java and JavaScript software

Understanding of risk mitigation techniques to ensure the security of software applications

Set up and operate software security testing techniques in conformity with the technical reference architecture and the companies security policies and guidelines

Conduct in-depth analysis of open-source threats and vulnerabilities (including zero-day)

Collaborate with engineering teams to evaluate and assess the impact of vulnerabilities on current code, including libraries, frameworks, and dependencies

Identify and prioritize high-risk open-source components within our codebase, considering factors such as exploitability, severity, and exposure

Develop and implement remediation and risk mitigation plans to address identified vulnerabilities

Coaching and hands-on experience for code refactoring, patching, and dependency updates