Senior Application Security Engineer-ThreadFix

Location: Charlotte, NC; Chandler, AZ; Minneapolis, MN; Summit, NJ

Duration: Direct-Hire

Salary: $130,000+ year

Bonus: Annual

JOB DESCRIPTION

Our client is one of the largest banks in the world with excellent benefits and flexibility on remote work. Their main focus is on keeping employees and contractors’ long term. The applicant will join the Securities Division Quantitative Strategies Team. We are looking for candidates with RMBS products modeling/programming/development background to support the modeling libraries and work closely with technology to integrate and support them into production.

RESPONSIBILITIES

• Maintain and expand the enterprise vulnerability management system, ThreadFix
• Design, develop, and test custom software/scripts to integrate security, software development, and risk management systems
• Design and implement features and processes that seamlessly embed application security vulnerability management into Agile development and CI/CD deployment methods
• Ensure tools and documentation are maintained in accordance with enterprise policies and best practices
• Provide expert, 3rd level support on technology issues
• Drive vendor accountability to address product defects
• Support patching, upgrade, business continuity testing, and performance management
• Collaborate with Application Security Champions, development team members, and other Cybersecurity teams as a product and vulnerability management SME
• Collaborate with an offshore development and product support team

REQUIREMENTS

• 4+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 3+ years of ThreadFix experience
• 5+ years of technology management experience (managing software upgrades, ensuring availability, etc.)
• 3+ years of software development or scripting experience (C#/.Net preferred)
• 3+ years of SQL experience. T-SQL / MSSQL preferred.
• 3+ years of application security experience
• Experience with Agile and CI/CD technologies such as Jira, Kubernetes, Jenkins, etc.
• Able to troubleshoot complex technology integration issues
• Strong verbal, written, and interpersonal communication skills
• Excellent customer service skills

Category Code: JN008
#Dice