Junior Application Security Engineer

York Solutions • Wayzata, MN

251d • $20 - $30 • Hybrid

About The Position

We are looking for a motivated and detail-oriented Junior Application Security Engineer to join our global application security team. In this entry-level role, you will primarily focus on onboarding security tooling, maintaining documentation, and supporting developers in integrating security into the development process. In addition, supporting operations from vulnerability management perspective. This is an excellent opportunity to grow your career in the application security field while working in a collaborative and supportive environment.

Requirements

• Entry level someone who is trainable; 1 to 2 years of experience in IT, development, DevOps, or a related technical role (internship or academic experience will also be considered).
• Need some foundational IT skills with a passion for security.

Responsibilities

• Assist in the deployment and configuration of application security tools, including SAST, DAST, SCA, and other related technologies.
• Collaborate with development teams to integrate security tools into CI/CD pipelines.
• Ensure new teams and projects are successfully onboarded to security tools and processes.
• Create and maintain documentation, including onboarding guides, troubleshooting steps, and FAQs for security tooling.
• Develop training materials and how-to guides to empower developers to use security tools effectively.
• Serve as the first point of contact for developer questions related to security tooling and practices.
• Provide guidance on using security tools and interpreting findings.
• Support developers in onboarding, addressing and remediating vulnerabilities identified by security tools.
• Identify common issues and recommend process or tool improvements to enhance efficiency.
• Stay current on application security tools and practices to bring fresh ideas to the team.
• Maintain a list of onboarded development organizations and update as new orgs are onboarded.
• Help orgs in how to integrate their orgs with simple instructions and share the information.
• Support developers with IDE plugins for Checkmarx and share documentation on IDE plugins integration.
• Create and maintain developer onboarding documentation.
• Share documents with onboarding and integration information with new developers.
• Provide first-level support for developers using Checkmarx.
• Create and update coding standards documentation with security best practices.
• Set up and manage user accounts and access permissions in Checkmarx.
• Create and maintain project configurations.
• Configure scan presets as provided instructions.
• Generate and distribute security reports to development teams.
• Track remediation progress and follow up with development teams.
• Maintain vulnerability metrics and prepare status reports to share with lead developers.
• Document common security issues and create preferred remediation approaches.
• Help maintain and update security requirements in development workflows.
• Collect feedback from developers when contacted through Teams channel.
• Maintain internal knowledge base of security issues and solutions.
• Document common Checkmarx findings and remediation strategies.
• Create and update security checklists for different application types.

Benefits

• BCBS Medical with 3 Plans to choose from (PPO and High deductible PPO plans with Health Savings Program)
• Delta Dental plan with 2 free cleanings and insurance discounts
• Eye Med Vision with annual check-ups and discounts on lens
• Life and Accidental Death Insurance paid by company
• John Hancock 401(k) Retirement Plan with discretionary company match up to 5%
• Voluntary Insurance programs such as: Hospital Indemnity, Identity Protection, Legal Insurance, Long Term Care, and Pet Insurance.
• Flexible work environment with some remote working opportunities
• Strong fun and teamwork environment
• Learning, development, and career growth

What This Job Offers

• Career Level: Entry Level
• Industry: Professional, Scientific, and Technical Services
• Education Level: No Education Listed