Cyber Defense Senior Application Security Engineer

Company: Citizens
Location: Exeter
Posted on: May 5, 2021

Job Description:

DescriptionThe successful applicant will be responsible for participating in the coordination and presentation of application vulnerability reviews to development, risk, audit and business teams. This role is technical and will require the applicant to be proficient in the use of state of the art application vulnerability scanning tools and you will support critical efforts within the environment to improve the application security profile of the organization.Responsibilities include:* Hands on use of automated tools and manual testing techniques to identify flaws, weaknesses, vulnerabilities and attack vectors in web applications (SAST, DAST, & IAST)* Creating, producing and maintaining metrics associated with the application security program* Reviewing and coordinating changes to cyber security policies, procedures and standards* Self-auditing our application security program in an effort to instill continuous improvement* Guiding development teams in best practices across all stages of the SDLC process* Monitoring and responding to Open Source Software weaknesses and exposures* Evangelizing and driving Application Security inside the company* Building a very close working relationship with application development and QA teams* Developing and updating security patterns aligned with security requirementsQualificationsRequired Skills and Experience:* At least 3 years of strong applicable security or development experience* Strong presentation and communication skills (written and oral)* Hands-on experience operating in an Agile/DevSecOps oriented environments* Experience implementing and supporting application security tools in automated build pipelines* Ability to present complex, technical information to a variety of audiences, both technical and non-technical, in written and/or oral formats* Proven hands on experience with application security testing techniques such as fuzzing, penetration testing and code scanning, ideally with both static (SAST) and dynamic (DAST) tools.* Experience with manual testing of web applications, API's, and mobile applications.* Ability to write scripts in languages such as Python, BASH, or PowerShell for automation* Solid understanding of secure SDLC principles* Knowledge and understanding of the OWASP top 10* Architecture reviews with software solutions is a plus* Application development background is a plusEducation and Certifications:* Bachelor's degree preferred* Security related certifications such as CSSLP, GWAPT, GWEB, CEH preferredHours & Work ScheduleHours per Week: 40Work Schedule: Monday through FridayThis position is not available in ColoradoWhy Work for UsAt Citizens, you'll find a customer-centric culture built around helping our customers and giving back to our local communities. When you join our team, you are part of a supportive and collaborative workforce, with access to training and tools to accelerate your potential and maximize your career growth.Equal Employment OpportunityIt is the policy of Citizens to provide equal employment and advancement opportunities to all colleagues and applicants for employment without regard to race, color, ethnicity, religion, gender, pregnancy/childbirth, colleague or a dependent's reproductive health decision making, age, national origin, sexual orientation, gender identity or expression, disability or perceived disability, genetic information, genetic characteristic, citizenship, veteran or military status, marital or domestic partner status, family status/parenthood, victim of domestic violence, or any other category protected by federal, state and/or local laws.Equal Employment and Opportunity Employer/Disabled/VeteranCitizens is a brand name of Citizens Bank, N.A. and each of its respective affiliates.

Keywords: Citizens, Warwick , Cyber Defense Senior Application Security Engineer, Engineering , Exeter, Rhode Island