Application Security (AppSec) Engineer

Kiewit • Omaha, NE

78d • Onsite

About The Position

The AppSec Engineer will provide technical support and guidance over the Kiewit Information Technology application security program. They will lead the discovery, assessment, remediation, and validation of vulnerabilities related to custom developed applications.

This position works closely with Kiewit application developers, solution architects, and platform administration teams to foster a culture of secure software development. This position is a balance of technical and soft skills to achieve a sustained and proactive reduction in risk.

Requirements

• 3-5 years' experience as an application developer (.Net or Python).
• 2-3 years' experience as a penetration tester.
• 2-3 years' experience with cloud security controls.
• Proficient with code scanning engines.
• Have a working knowledge of network technologies and security controls.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Passion for cybersecurity.
• Attention to detail and ability to work independently.
• Ability to work collaboratively in a team environment.
• Ability to present findings and recommendations to senior leadership
• Regular, reliable attendance
• Work productively and meet deadlines timely
• Communicate and interact effectively and professionally with supervisors, employees, and others individually or in a team environment.
• Perform work safely and effectively. Understand and follow oral and written instructions, including warning signs, equipment use, and other policies.
• Work during normal operating hours to organize and complete work within given deadlines. Work overtime and weekends as required.
• May work at various different locations and conditions may vary.

Nice To Haves

• Azure cloud administration or development experience.
• Checkmarx scanning suite experience.
• Systems integration experience.
• Experience developing applications with containers.

Responsibilities

• Meet with development teams regularly to discuss security vulnerabilities in their applications and track remediation efforts.
• Review, test, and prioritize security findings.
• Conduct penetration test on internal Kiewit systems/applications as needed.
• Analyze and develop threat models for Kiewit systems/applications.
• Proactively research and identify security gaps and work to remediate.
• Stay up to date with new attack techniques and security tools.
• Develop and support custom build security tools.

Benefits

• top-tier medical, dental and vision plans covering eligible employees and dependents
• voluntary wellness and employee assistance programs
• life insurance
• disability
• retirement plans with matching
• generous paid time off

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Professional, Scientific, and Technical Services
• Education Level: No Education Listed
• Number of Employees: 5,001-10,000 employees