Application Security Engineer

Home

People

ID : 1859

Education level : Bachelor's degree

Work experience level : Associate- (1-2 year experience)

Work experience in total : Years

Job type : Online

Job time : Maandelijks

Last date of registration :

2023-01-21

An experienced Security Engineer with a demonstrated history of working in the Information Security industry. Skilled in Secure Source Code review, Secure Software Development Life Cycle implementation. An engineer who tries to enable DevSecOps culture. A self-motivated quick learner and an Application Security enthusiast who is eager to learn in-depth AppSec knowledge in new technology realms.

Application Security Engineer - Wiley Global Technologies - (July 2022 - Present)

Perform manual application security assessment
Perform penetration testing
Support SAST/DAST onboardings and false positive markings
Tool POCs for new technologies (SAST | DAST | IAST | SCA | OSS)
Work with Developers, DevOps, QE teams to enable security in CI/CD
Assist in the general operations and activities of security incidents related to application security.
Implementation and initial startup on secret manager - Conjur Enterprise
Develop security standards, patterns and supporting documentation.
Support engineering with implementing security fixes, ensuring security scanners are utilized correctly & developing strategies to proactively secure their architecture.
Promote DevSecOps culture within the organization.
Proactive participant in AppSec vulnerability management program

Associate Application Security Engineer - Wiley Global Technologies - (June 2022 - July 2022)

Perform manual application security assessment
Perform penetration testing
Support SAST/DAST onboardings and false positive markings
Tool POCs for new technologies (SAST | DAST | IAST | SCA | OSS)
Work with Developers, DevOps, QE teams to enable security in CI/CD
Assist in the general operations and activities of security incidents related to application security.
Implementation and initial startup on secret manager - Conjur Enterprise
Develop security standards, patterns and supporting documentation.
Support engineering with implementing security fixes, ensuring security scanners are utilized correctly & developing strategies to proactively secure their architecture.
Promote DevSecOps culture within the organization.
Proactive participant in AppSec vulnerability management program

Intern Application Security Engineer - Wiley Global Technologies - (September 2022 - June 2021)

Perform manual application security assessment
Support SAST/DAST onboardings and false positive markings
Tool POCs for new technologies (SAST | DAST | IAST )
Work with Developers, DevOps, QE teams to enable security in CI/CD
Assist in the general operations and activities of security incidents related to application security

Penetration Testing
Application Security Assessment
SAST - SonarQube, Checkmarx, Snyk
DAST - Rapid7, BurpSuite Enterprise
IAST & SCA - Contrast Security
Vulnerability Management CodeDX
FP Analysis
Secrets Management - Conjur
Enterprise
Python, Java, JavaScript, Bash
AWS, BurpSuite, Metasploit, ZAP
Linux, Unix, Windows

A Secure Corroboration Protocol for Internet of Things (IoT) Devices
- Using MQTT Version 5 and LDAP
- https://ieeexplore.ieee.org/document/9333910