Application Security Engineer
Woodbridge Township, NJ
Hybrid
Contract
$69.5/hr - $78.31/hr
Outstanding long-term contract opportunity! A well-known Financial Services Company is looking for an Information Security Engineer in Charlotte, NC or Iselin, NJ(Hybrid).
Work with the brightest minds at one of the largest financial institutions in the world. This is long-term contract opportunity that includes a competitive benefit package! Our client has been around for over 150 years and is continuously innovating in today's digital age. If you want to work for a company that is not only a household name, but also truly cares about satisfying customers' financial needs and helping people succeed financially, apply today.
Contract Duration: 12 Months
Required Skills & Experience
5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education.
5+ years of experience as Application Security and DevSecOps engineer, collaborating with developers to adopt and mature secure development.
3+ years' experience in one or more of programming languages, .Net, C#, Java, RUST, C+ Desired Skills & Experience
Ability to write automation scripts in Python, PowerShell to support internal projects.
Experience with CI/CD pipelines and related technologies (e.g., GitHub, Jenkins, Maven, Artifactory, Harness, Xray, Curation).
Good understanding of Secure Software development lifecycle.
Strong knowledge of OWASP Top 10 or CWE.
Detailed oriented must be able to create documentation on different SCA procedures and tool configuration.
Familiarity and experience with Al tools supporting false positives reduction, auto code remediation, open-source threat intelligence would be preferred.
Experience with Jira/Confluence.
Strong problem-solving and analytical skills.
Certification in information security (CISSP, CISM, CEH, etc.).
Experience with container security working with technologies like k8s and container technologies such as Openshift.
Experience generating Software Bill of Materials (SBOMs) using CycloneDX or SPDX, managing or utilizing dependency track.
What You Will Be Doing
Managing security automation tools with focus on SCA (i.e. Checkmarx One, BlackDuck) and other tools in the ecosystem alone with supporting operational management with regularity scheduled upgrade of the tools.
Interface with various internal teams ServiceNow AVR, DevOps and vulnerability operations team to make sure SCA vulnerabilities are identified and recorded per the application security policies and guidance.
Collaborate with security architecture teams to design vulnerability management workflow, establish best practices and design guidance to optimize experience for developers.
Security training and outreach as needed for internal development teams.
Adversarial security analysis on various application security requirements as requested from various CIO teams, research and recommend cutting-edge tools and industry best practices.
Work with application security governance teams, risk & compliance partners on audits (e.g., SOC 2, PCI-DSS) and recommending relevant policies.
Collaborate with CTO pipeline teams to improve code quality and vulnerability detection on Opensource code signing and S8OM creation.
Analyze, enhance, architect and support container security tools and platforms.
Design and build advanced security solutions to strengthen Opensource software supply chains for effective automation and management.
You will receive the following benefits:
Medical Insurance - Four medical plans to choose from for you and your family
Dental & Orthodontia Benefits
Vision Benefits
Health Savings Account (HSA)
Health and Dependent Care Flexible Spending Accounts
Voluntary Life Insurance, Long-Term & Short-Term Disability Insurance
Hospital Indemnity Insurance
401(k) including match with pre and post-tax options
Paid Sick Time Leave
Legal and Identity Protection Plans
Pre-tax Commuter Benefit
529 College Saver Plan
Motion Recruitment Partners (MRP) is an Equal Opportunity Employer. All applicants must be currently authorized to work on a full-time basis in the country for which they are applying, and no sponsorship is currently available. Employment is subject to the successful completion of a pre-employment screening. Accommodation will be provided in all parts of the hiring process as required under MRP's Employment Accommodation policy. Applicants need to make their needs known in advance.
Posted by: Natalie DeWitt
Specialization:
Security Engineering