Developer (Application Security Engineer)

Overdrive • Cleveland, OH

5d • Hybrid

About The Position

This position will require you to be in the Greater Cleveland, OH Area We are presently in a hybrid schedule, 2 days on campus and 3 days WFH The Application Security Engineer's responsibilities include maintaining and improving the security posture of OverDrive to protect our patron and customer data and intellectual property. This role works primarily with the development and IT departments to ensure a high level of security within our applications through all phases of our SDLC as well as maintain compliance with regulatory standards such as PCI, GDPR, FERPA, CCPA, NIST CSF, etc. To be qualified for this Application Security Engineer opening, you need to be able to write OO code, read OO code, and design and implement web applications.

Requirements

• Bachelor's Degree in Computer Science or related field or equivalent experience.
• Application development experience required - C#, Ruby and JavaScript preferred
• Excellent interpersonal / communication skills.
• Well organized with strong attention to detail and ability to prioritize work.

Responsibilities

• Assist with triage and remediation of vulnerabilities within the OverDrive environment.
• Advocate security best practices throughout the company but especially within the development department through short monthly presentations or threat modelling meetings.
• Review SAST findings for accuracy and risk to the custom code developed within the environment.
• Perform risk assessments on third party software and libraries to determine the safety of their use in the OverDrive environment.
• Research and review dependency vulnerabilities that are discovered in third party libraries.
• Conduct research to identify new attack vectors against OverDrive's products and services.
• Perform application security pen tests against developed applications or work with third party vendors to perform yearly application reviews on larger applications.
• Gather, verify and report audit to allow for educated decisions on remediations.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level