Senior Application Security Engineer, Entrata

• The ideal candidate will bring extensive experience in Static and Dynamic Application Security Testing (DAST / SAST) methodologies and a track record of providing strategic leadership in application security
• Bachelor's or Master’s degree in Computer Science, Information Security, or a related field
• 6+ years of experience in a Security-related field for a Master’s degree, 8+ years for a Bachelor’s. At least 4 years of experience in an Application Security role
• Deep knowledge of web application frameworks and technologies
• Strong understanding of cloud security principles
• Experience managing SAST tooling in a DevSecOps role
• Experience pen testing web applications, and experience with automated DAST tooling
• Strong interest in information security, particularly in software security
• Strong understanding of computer science and software development lifecycles
• Basic understanding of security frameworks and standards (e.g., ISO 27001, CIS AWS Foundations)
• Excellent problem-solving skills and attention to detail
• Strong communication skills and interpersonal skills, with the ability to effectively communicate complex security concepts to technical and non-technical stakeholders
• Proven ability to lead and collaborate in a team-oriented environment. Experience in mentoring and guiding junior team members
• Relevant certifications, such as CISSP, CEH, OSCP, or CompTIA Security+, are a plus

Desirable

• Entrata, a leading Software as a Service (SaaS) company specializing in property management solutions, is seeking an experienced and senior-level Application Security Engineer to lead our dynamic team in Lehi, UT
• As a Senior Application Security Engineer at Entrata, you will play a pivotal role in defining and implementing advanced security measures to protect our software applications and client data
• SAST (Static Application Security Testing): Implement SAST tooling into our CI/CD pipeline to identify and prevent vulnerabilities in code before they reach our product
• DAST (Dynamic Application Security Testing): Perform manual and automated security assessments against our application
• Implement robust automated scanning tooling across our web and mobile applications
• Secure Coding Education: Develop secure code recommendations and guidelines for the organization to follow during the SDLC
• Regularly educate the organization on these principles
• Threat Modeling: Drive the development and maintenance of comprehensive threat models for Entrata's applications
• Regularly perform threat models for critical components of
• Vulnerability Management: Lead and guide development teams in implementing effective remediation strategies for identified vulnerabilities
• Secure Architecture Recommendations: Provide strategic direction and oversight in integrating security measures into the software architecture
• Review and provide security recommendations for key software architecture decisions