Application Security Engineer

TCWGlobal • San Mateo, CA

7d • Remote

About The Position

TCWGlobal is seeking an Application Security Engineer for a six-month contract opportunity. The role focuses on validating static application security testing (SAST) and software composition analysis (SCA) results, investigating potential vulnerabilities, and collaborating with software developers on remediation. The engineer will work with application security professionals and development teams to identify risks, recommend mitigation strategies, and integrate security practices into the Software Development Lifecycle (SDLC). The position is fully remote and pays up to $72.10 per hour.

Requirements

• At least 2 years of experience working within software development.
• Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field, or equivalent experience of more than 7 years.
• Experience working with multiple programming languages, such as Java, Go, Python, or Perl.
• Understanding of common application security vulnerabilities, including the OWASP Top 10, and methods for identifying and remediating them.
• Familiarity with enterprise application architectures designed for scalability and reliability, including security considerations.
• Experience participating in security architecture and feature design reviews.
• Strong written and verbal communication skills, including the ability to explain technical concepts to technical and non-technical audiences.
• High level of personal integrity and sound judgment when handling confidential information and security-related matters.
• Ability to work independently, collaborate effectively with development teams, and manage multiple priorities.

Nice To Haves

• Experience securing hosts, databases, and applications within multi-tier systems.
• Experience with penetration testing.
• Knowledge of automated attack tools and vulnerability mitigation techniques.
• Ability to think like an attacker to identify potential security weaknesses.
• Experience with AWS and Akamai technologies.
• Relevant information security certifications, such as GWAPT, OSCP, or equivalent credentials.
• Strong analytical, evaluative, and problem-solving skills.

Responsibilities

• Partner with software engineers to identify and address security risks, providing mitigation recommendations throughout the SDLC.
• Analyze application security scanner results, including SAST and SCA findings, to identify potential vulnerabilities.
• Investigate and validate identified vulnerabilities, assess their applicability, and perform risk analysis as needed.
• Configure and fine-tune security scanning tools to improve the accuracy and relevance of results within application environments.
• Communicate security findings to developers and application owners, tracking vulnerabilities through remediation and resolution.
• Collaborate with application security engineers and development teams to align security activities with development schedules and release timelines.
• Support security architecture and feature design reviews to help identify potential risks early in the development process.
• Evaluate application security risks across enterprise application architectures and multi-tier systems.

What This Job Offers

• Career Level: Mid Level