Application Security Engineer, Podium

• 4+ years of cybersecurity experience with a deep background (preferably 5+ years) in application programming
• Technical and analytical expertise, including threat modeling, vulnerability testing, and proficiency in software development (Java, Python, C++, Ruby, etc.)
• Solid understanding of network and web protocols, experience with intra-company and third-party APIs, and proficiency with dynamic and static analysis tools
• Excellent communication of business risk from cybersecurity issues and a track record of integrity, excellence, curiosity, and adaptability

Desirable

• As an Application Security Engineer at Podium, you will be responsible for validating that application services are designed and implemented with high security standards
• You will analyze application security, addressing both legacy and emerging security issues, and implement repeatable secure development practices to prevent program flaws that could lead to exploitation
• You will constantly assess applications for weakness, provide resolutions and communicate findings to the technical leadership team for effective risk mitigation
• You will be constantly assessing applications for weaknesses and finding resolutions before they can be abused
• In this role, you will also assess the security of applications for business-to-business initiatives, third-party relationships, and vendors
• As a highly knowledgeable individual, you will recommend programmatic controls, and monitor and manage secure development practices to tackle modern-day issues
• You will think like an attacker, but will always act with integrity and not abuse your privilege
• Perform vulnerability and penetration testing, emphasizing automation for testing and remediation
• Collaborate with developers, DevSecOps, and other teams to conduct repetitive validation testing and ensure a continuous cycle of secure development
• Stay updated on public-facing security issues, adopt new testing tactics, and actively participate in application projects and change management committees
• Define and follow a security review process, utilizing dynamic and static code analysis resources
• Document delivery advances meeting service-level agreements (SLAs) and business metrics
• Align with architects and development teams for secure design, actively engaging in information security projects
• Respond to service and escalation tickets, conduct performance testing, and contribute to local security groups/organizations and conferences