Hybrid Application Security Engineer

at Dotdash Meredith

• Job title: Application Security Engineer
• Job type: Full Time
• Experience level: Junior, Mid level
• Salary: $100,000 - $120,000 per year
• Degree requirement: Bachelor's Degree
• Tech skills: Java, JavaScript, Python, SDLC
• Location requirements: Hybrid, New York City, United States

About the role

• Application Security Engineer at People Inc. supporting software development teams and vulnerability management in a hybrid work setting.

Responsibilities

• Function as a subject matter expert for security solutions within the organization’s platform.
• Integrate security solutions into the SDLC process.
• Work with development teams to improve the security of CI/CD processes.
• Design and develop coding standards across infrastructure, application, and data security.
• Help evolve application security functions and services.
• Prioritize, triage and remediate vulnerabilities and findings from security scans and bug bounty programs.
• Review security test results from vulnerability scans and penetration tests and propose appropriate remediation measures or mitigation controls.
• Conduct security code reviews for various languages and frameworks of web and mobile applications.
• Develop metrics and reporting on the posture of the application security program.

Requirements

• Bachelor’s degree in Business, Management, Information Systems, OR equivalent professional experience.
• 2+ years experience in a security technical role or software development.
• Experience with application security tooling and processes, including code review, static code analysis, penetration testing, risk management, etc.
• Experience with data encryption, cryptography and encryption key management.
• Experience with configuration management and DevOps practices to ensure security is built into the SDLC process.
• Development experience in Java, JavaScript and Python.
• Scripting and automation experience using RESTful APIs.
• Knowledge of SANS/CWE Top 25, OWASP Top 10 Application Security principles.
• Strong knowledge and experience in implementing SDLC best practices.
• Knowledge with Git and version control best practices.

Benefits

• medical, dental, vision, prescription drug coverage
• unlimited paid time off (PTO)
• adoption or surrogate assistance
• donation matching
• tuition reimbursement
• basic life insurance
• basic accidental death & dismemberment
• supplemental life insurance
• supplemental accident insurance
• commuter benefits
• short term and long term disability
• health savings and flexible spending accounts
• family care benefits
• a generous 401K savings plan with a company match program
• 10-12 paid holidays annually
• generous paid parental leave (birthing and non-birthing parents)
• voluntary benefits such as pet insurance, accident, critical and hospital indemnity health insurance coverage, life and disability insurance