Application Security Engineer, Information Technology

Do you have strong technical skills?  Are you inquisitive, methodical, analytical and collaborative with a strong attential to detail?   ServiceLink, the unsurpassed best in the mortgage industry, invites you to apply for the opening of Application Security Engineer position.  This key position carries the responsibility of partnering with other security engineers, software developers, architects to identify vulnerabilities and make appropriate recommendation.  The ideal candidate must have a deep technical understanding of multiple classes of security defects, along with strong development skills, and an understanding of popular platforms and languages, and the ability to learn new information at a rapid pace. A strong track record in security consulting, penetration testing, and general hacking are critical, but the willingness and drive to improve the security overall is even more important.  If you thrive on bold challenges and collaboration with a progressive, high-performance team, this is an exciting time to join ServiceLink, a company fully committed to supporting the development and advancement of every employee’s career goals.

A DAY IN THE LIFE

In this role, you will…

·        Develop security documentation, training, and guidance for internal infrastructure and engineering teams

·        Consult with internal teams and assist with architecture, threat modeling, and reviewing systems and infrastructure to identify vulnerabilities and weaknesses in architecture, make appropriate recommendations, and drive teams to implement those recommendations

·        Perform penetration testing to examine target systems in detail, looking for vulnerabilities and weaknesses

·        Conduct vulnerability research and analysis into emerging threats to include proactive security research on the technologies that we use

·        Identify and implement security technical and process improvements

·        Define and own metrics to determine effectiveness of security controls

WHO YOU ARE

You possess …

·        Bachelor of Science in Computer Science, Mathematics, Engineering or equivalent experience or education

·        5+ years of experience in a hands-on security role with a demonstrated mastery of multiple classes of security defects

·        Demonstrated coding skills in one or more popular languages and platforms including C#, SQL, Python, and others

·        Experience with the .NET Core framework

·        Understanding of cloud computing platforms and cloud-based infrastructure design and operation

·        Understanding of container technologies, security, and tooling (such as Docker, Kubernetes, Helm)

·        Understanding of networking, routing, and web related protocols

·        Develop security documentation, training, and guidance for internal infrastructure and engineering teams

·        Consult with internal teams and assist with architecture, threat modeling, and reviewing systems and infrastructure to identify vulnerabilities and weaknesses in architecture, make appropriate recommendations, and drive teams to implement those recommendations

·        Perform penetration testing to examine target systems in detail, looking for vulnerabilities and weaknesses

·        Conduct vulnerability research and analysis into emerging threats to include proactive security research on the technologies that we use

·        Identify and implement security technical and process improvements

·        Define and own metrics to determine effectiveness of security controls

·        Apply comprehensive hardening to infrastructure platforms, deployment code, and images

·        Architect, build, automate, and operate automated security controls/tools and review capabilities to detect vulnerabilities across all applications and services

·        Be a champion for security culture and excellence, exercise risk-based judgement and prioritize remediation work

·        Other duties as assigned

·        Bachelor of Science in Computer Science, Mathematics, Engineering or equivalent experience or education

·        5+ years of experience in a hands-on security role with a demonstrated mastery of multiple classes of security defects

·        Demonstrated coding skills in one or more popular languages and platforms including C#, SQL, Python, and others

·        Experience with the .NET Core framework

·        Understanding of cloud computing platforms and cloud-based infrastructure design and operation

·        Understanding of container technologies, security, and tooling (such as Docker, Kubernetes, Helm)

·        Understanding of networking, routing, and web related protocols

Preferred Qualifications:

·        Experience with Microsoft Azure

·        Experience with Container security platforms

·        Continuous integration and delivery tooling (CI/CD)

·        Current security certification (e.g. OSCP, OSEE) is a PLUS