Application Security Engineer
About The Position
The Application Security Engineer is responsible for performing complex information technology, and cyber security analysis and control work. The incumbent will maintain the security and integrity of communication infrastructure systems and cybersecurity systems, as defined in Section 117.001(2) of the Texas Business and Commerce Code; and ensure the security of TRS applications by implementing and managing application security measures, working closely with the other Information Security team members, the IT department, application development teams, and business technologists to identify and mitigate security risks, develop and implement security protocols, and provide training and support to development staff.
Requirements
- Bachelor’s degree from an accredited college or university in Cybersecurity, Information Technology, or a closely related field.
- High school diploma or equivalent and additional full-time experience in cybersecurity, information security, systems analysis, programming, computer operations, IT business analysis or related experience may be substituted on an equivalent year-for-year basis.
- Four (4) years of full-time directly related, progressively responsible experience in cybersecurity, information security, systems analysis, programming, computer operations, IT business analysis or related experience.
- One (1) year of full-time directly related, progressively responsible experience developing and training employees on security/privacy policies, data handling practices and procedures, and legal obligations or related experience.
- One (1) year of full-time directly related, progressively responsible experience conducting IT audits and needs analysis to improve business process solutions. As well as developing and writing IT policies, procedures, and audit responses or related experience.
- Certification as a Certified Information Systems Security Professional (CISSP), or other security related certifications.
Nice To Haves
- Experience with risk management frameworks as it pertains to the National Institute of Standards and Technology.
- Experience with various security monitoring tools, network and web assessment tools, and automation techniques.
- Basic development or scripting experience and skills. (.Net, Python, and Java are preferred.)
- Experience with identifying security issues through code review.
- GIAC 500 series or higher certifications, OSCP, or other security related certifications.
Responsibilities
- Works with application development teams to develop and implement secure coding practices, including coding standards, code reviews, and security-focused testing.
- Develops and execute a process for regular application security assessments, including code reviews, threat modeling, and design reviews.
- Develops and maintain a library of secure coding resources for application developers.
- Develop and implement application security policies and procedures that align with industry standards and best practices.
- Provides regular reports to the Information Security Leadership on the status of application security assessments.
- Work with application development teams to prioritize and remediate identified vulnerabilities.
- Provide training and support to application developers on secure coding practices.
- Monitor and enforce compliance with application security policies, procedures, and tooling.
- Collaborate with the IT department, Information Security team, and application development teams to design and implement security controls and measures, including access controls, encryption, and network segmentation.
- Performs related work as assigned.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
