API/Application Security Engineer

Job Description:

Security Design and Implementation:

1. Designs and implements security measures for applications, considering architecture, coding standards, and deployment environments.
2. Collaborates with development teams to integrate security into the Software Development Lifecycle (SDLC).
3. Develops and maintains security policies, procedures, and standards.

Vulnerability Assessment and Remediation:

1. Conducts security assessments, including code reviews, static and dynamic analysis, and penetration testing.
2. Identifies and prioritizes security vulnerabilities.
3. Works with development teams to remediate identified vulnerabilities.

Security Testing and Monitoring:

1. Oversees regular security testing on applications and systems.
2. Implements and manages security tools and processes for automated security testing.
3. Monitors applications for security incidents and vulnerabilities.

Threat Modeling and Risk Management:

1. Creates threat models to identify potential security threats and vulnerabilities.
2. Assesses and manages security risks.
3. Develops and implements security controls to mitigate risks.

Education and Training:

1. Educates and trains developers on secure coding practices and security best practices.
2. Helps to create a security-conscious culture within the organization.

Staying Up-to-Date:

1. Keeps up-to-date with the latest security threats, trends, and countermeasures.
2. Evaluates emerging threats and proposes improvements to security measures.

Documentation and Reporting:

1. Creates and maintains documentation and metrics relating to application security.
2. Prepares reports and dashboards to track security performance.