Application Security Engineer

Application Security Engineer The application security engineer shall have extensive experience in the involvement and understanding of cloud security controls (security-as-code) and Prime’s target cloud infrastructure Google Cloud Platform (GCP).

Must be proficient in reading, writing, analyzing and assessing Terraform code/scripts and conducting security code-reviews.

Daily Responsibilities/Job Description:

Reading, writing, analyzing and assessing code/scripts for security vulnerabilities.

Running various application security testing tools and interpreting their findings

This position will focus on reviewing the current security-as-code infrastructure and the security of applications deployed in GCP.

This position will have an in-depth understanding of CI/CD development processes, tools and technologies and will be responsible for promoting security code changes through the CI/CD pipeline.

This position must have a solid understanding of python, git, and other development languages is necessary.

This role will also require that the individual be familiar with current and emerging cloud technologies and tools.

Skills Overview:

Application development tools and practices

Automation, CI/CD tools

Integrating security into application development (e.g. code reviews, security testing)

Prior Cybersecurity or some Information security experience

Must Haves:

Reading, writing, analyzing and assessing code in one or more languages (Java preferred)

Public (AWS, Azure, GCP) or private cloud (VMware, Dell/EMC) IaaS/PaaS/aPaaS experience

Familiarity with application security issues and mitigation (e.g.