Remote Application Security Engineer - Protect the Future of Insurance

Job Overview:

We're seeking a highly skilled Application Security Engineer to join our team on a contract basis, working remotely to support the ongoing business needs of a trusted insurance brand. As an Application Security Engineer, you will play a critical role in ensuring the security and integrity of our customer's applications, protecting the personal data of millions of members across 23 states and the District of Columbia.

Key Responsibilities:

• Conduct thorough security assessments on application code and applications to identify potential security flaws and provide actionable recommendations to developers
• Collaborate with cross-functional teams to incorporate security best practices into the design and architecture of applications
• Advocate for the adoption of the OWASP Application Security Verification Standard (ASVS) as an internal standard
• Stay up-to-date with the latest security trends, vulnerabilities, and attack vectors, proactively identifying potential risks to applications
• Support standards-compliance in secure system development, support, assessment, remediation, and configuration/change management
• Conduct continuous cloud security testing and perform threat modeling with application teams

Requirements:

• Proficiency with application security testing technologies such as SAST, DAST, SCA, IaC, IAST, RASP, Container Image Scanning, etc.
• Knowledge of common security vulnerabilities and best practices for remediation
• Experience with security assessment tools such as static analysis tools, dynamic scanners, and open-source library scanners
• Awareness of application security across multiple verticals such as cloud/service provider, security provider, mobile, appliance
• Strong customer service skills and ability to understand CI/CD Automation
• Familiarity with secure coding standards and practices, such as OWASP Top 10, and OWASP Top 10 API
• Proficiency in programming languages commonly used in application development, such as Java, C#, Python, or JavaScript

What We Offer:

• Competitive salary and benefits package
• 100% remote work arrangement
• Opportunity to work with a trusted insurance brand
• Collaborative and dynamic work environment
• Professional development and growth opportunities

Education and Certifications:

• Bachelor's Degree in Computer Science, Information Security, or a related field
• Cloud certifications such as AWS Certified Security - Specialty certification a plus

How to Apply:

If you're a motivated and experienced Application Security Engineer looking to make a difference, please submit your application. We encourage you to apply even if you don't feel you're a perfect match, as we're looking for great people to join our friendly team.