Application Security Engineer - SAST, DAST

Required Skills:

Develop policy and standards for API security.Experience and knowledge in Application Programming Interface (API), static application security testing (SAST) and related tools like Veracode / Checkmarx / Fortiy.Experience and knowledge in Burp Suite tool for dynamic testing (DAST).Primarily responsible for API application security but with a good working knowledge of other security domains (Cryptography, Identity and Access Management, Threat and Vulnerability Management)At least 4 years of working experience in application security that includes API, SAST and DAST along with Checkmarx, VeracodePrimarily responsible for application security but with a good working knowledge of other security domains (Cryptography, Identity and Access Management, Threat and Vulnerability Management).Knowledge of security technologies (encryption, data protection, design, privilege access, etc.)Proficiency in planning, reporting, establishing goals and objectives, standards, priorities and schedulesExcellent decision-making, analytical and problem solving skillsExcellent verbal and written communication skills to technical and non-technical audiences of various levels in the organizationStrong knowledge of development and application securityKnowledge of information security principles, web applications, and intermediate familiarity with malicious code and common hacking techniques used by malicious actorsExperience conducting risk assessments and performing threat modeling of applications