Sign in Start free trial

Principal Application Security Engineer

Location: US
Workplace: Remote
Employment: Full Time
Salary: USD 177,000–225,000/yr

Apply on the employer’s site

Posted 2mo ago

The employer’s full description could not be read from their board. This is a summary of the posting — follow the apply link for the original.

Responsibilities

Lead secure development lifecycle assurance processes
Lead security automation technologies
Drive security hardening strategy
Respond to security threats
Define new security capabilities
Grow the team by hiring talent
Partner with senior leaders on security initiatives
Lead cross-functional projects
Establish security development lifecycle practices
Perform security design reviews
Perform threat modeling
Evaluate, prototype, implement, and operate security tools
Create secure architecture standards, frameworks and patterns
Discover and analyze emerging security threats
Implement centralized mitigations
Maintain knowledge of security threats and best practices
Drive security assessment programs
Drive penetration testing programs
Drive bug bounty programs
Participate in security incident response

Requirements

8+ years of technical security leadership
Experience with security products
Experience with threat modeling
Experience with security design
Experience with security architecture
Experience with cryptography
Experience with mobile security
Experience with cloud computing technologies
Solid understanding of application security vulnerabilities
Solid understanding of infrastructure security vulnerabilities
Proficiency implementing SDL process
Proficiency implementing SDL technology
Proficiency implementing SDL automation in a DevOps environment
Experience with large-scale web applications
Experience with microservices
Experience with API design
Experience with access management
Experience with authorization
Experience with authentication
Experience with data protection
Experience with encryption
Knowledge of Python
Knowledge of C# .NET
Knowledge of JavaScript
Knowledge of node.js
Knowledge of Java
Computer Science / Engineering degree or equivalent experience

Preferred

Experience with Cloudflare security
Experience with AWS VPCs
Experience with EC2 instances
Experience with docker
Ability to drive good decisions through data
Great attention to detail
Ability to deliver KPIs
Experience driving application security training
Experience driving security champions programs
Experience driving security awareness campaigns
Active contributor to the security community
Ability to attract and hire great talent

Skills

DAST
SAST
SCA
OWASP Top 10
CWE
DevOps
API
Python
C# .NET
JavaScript
node.js
Java
Cloudflare
AWS
VPC
EC2
docker

More jobs at iHerb

Similar roles