Application Security Engineer - Vulnerability Management

<p><p><b>Job Responsibilities :</b><br/><br/>- Read/learn/discuss latest trends/tools/best practices/updates of cyber security, application development, and cloud services industries.<br/><br/>- Perform custom impact and risk analysis of identified security vulnerabilities for each product team.<br/><br/>- Create mitigation plans with product teams to resolve security vulnerabilities.<br/><br/>- Build tooling to automate security into the product teams' development, build, deployment, and operational processes.<br/><br/>- Actively contribute to story planning, identifying and providing expertise on work items that involve security considerations.<br/><br/><b>Be On-Call for :</b><br/><br/>- Cyber security breaches.<br/><br/>- High impact events (like a day zero effecting a team) or a breach.<br/><br/>- Uptime disruptions caused by their contributions.<br/><br/><b>Skills Required :</b><br/><br/>- Cloud Platform : AWS, Microsoft Azure.<br/><br/>- Development Environments : VSCode, JetBrains, Eclipse.<br/><br/>- Programming Languages : Know at least a few languages well (Java, JavaScript/TypeScript, C++, C, Python, Powershell, Unix shell, etc.<br/><br/>- Infrastructure as Code : CloudFormation, CDK, Bicep, Terraform, Ansible, etc.<br/><br/>- SIEM/SOAR : Microsoft Sentinel, Splunk, Checkmarx.<br/><br/>- OS : Linux, Windows.<br/><br/>- Configuration Management Tools : Git, GitHub, GitLab, Azure DevOps.<br/><br/>- Vulnerability Management Tools : Nessus Pro, Tenable IO, FireEye, CrowdStrike, Defender, SpyCloud etc.<br/><br/><b>Competencies :</b><br/><br/>- Willingness to prioritize team success over individual recognition.<br/><br/>- Champions collaboration, knowledge sharing, and mentoring as foundational practices.<br/><br/>- Committed to improving DevSecOps processes through continuous learning and experimentation.<br/><br/>- Supports sustainable pace and actively addresses technical debt.<br/><br/>- Willing to work onsite one week per quarter.</p><br/></p> (ref:hirist.tech)