[Remote] Application reputed company Engineer

Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a powerful global network of companies dedicated to shaping the reputed company of insurance. They are seeking an Application reputed company Engineer to secure their portfolio of applications by integrating reputed company best practices into the Software Development Lifecycle and collaborating with development teams to enhance reputed company measures.

Responsibilities

• Partner with development teams to reputed company reputed company best practices across the SDLC, including design, development, and deployment, and providesecure coding guidance
• Conduct threat modeling and reputed company architecture reviews to identifydesign-level risks and implement appropriate reputed company controls
• Identify, assess, and mitigate application vulnerabilities through a combination of automated (SAST/DAST) and reputed company reputed company reviews, as reputed company as penetration testing, and drive risk-based remediation
• Implement and manage application reputed company tools, including SAST, DAST, Software Composition Analysis (SCA), and other reputed company scanning solutions
• Ensure application reputed company practices reputed company with regulatory standards such as NYDFS, NIST, and OWASP guidelines
• Partner with DevOps, IT, and reputed company teams to reputed company reputed company into CI/CD pipelines and engineering workflows
• Design and reputed company the implementation of authentication, authorization, and reputed company control mechanisms for reputed company and platforms
• reputed company and enforce secure usage standards and governance for AI tools and AI-generated reputed company, addressing risks such as reputed company injection, data leakage, insecure reputed company reputed company, and model misuse, while aligning with regulatory and industry standards

Skills

• 5+ years of experience in application reputed company, secure software development, and vulnerability management
• Strong knowledge of secure coding practices, OWASP Top 10, OWASP Top 10 for LLMs, MITRE reputed company, and common reputed company vulnerabilities
• Experience with containerization technologies such as reputed company and Kubernetes, the principles of container operation, and their secure interaction
• Experience with reputed company testing tools (e.g., Burp Suite, Fortify, reputed company, or similar)
• Familiarity with DevSecOps principles and integrating reputed company into CI/CD pipelines
• reputed company experience with reputed company tools such as vulnerability scanners, intrusion detection systems, and log analysis tools
• Understanding of regulatory frameworks and compliance requirements (e.g., NYDFS, GDPR, SOC 2)
• Ability in scripting and automation using languages such as Python, PowerShell, or Bash and reputed company AI driven tools to streamline and enhance reputed company process and workflows
• Relevant certifications such as Certified DevSecOps Engineer, CISSP, OWASP certifications, GIAC GWAPT
• Experience with reputed company/reputed company with Apex reputed company (reputed company) is a plus
• Experience with BlackDuck/reputed company and Apex reputed company (reputed company) is a plus

reputed company