Principal Engineer Application Security Job

Profile

Principal Engineer, Application Security
Summary
Under the leadership of the VP, Information Security Assurance, the Principal Engineer, Application Security is responsible for validating application services are designed and implemented in alignment with EVO's security policies, standards, and industry best practices. The Principal Engineer, Application Security will work with technical subject matter experts on the testing and mitigation of application weaknesses and recommend programmatic controls, and monitor and manage secure development practices for the delivery and implementation of secure applications. This position will also assess the security of third-party applications for business-to-business initiatives to ensure all applications are evaluated and tested for weaknesses and facilitate the development of remediation plans.
What you'll do:
In partnership with internal development teams, create and maintain security test plans to identify and remediate application deficiencies/weakness.
Participate and lead security team meetings to facilitate secure application design and development
Administer the static and dynamic application security testing tools and onboard new applications for testing
Liaison with internal development teams to ensure required application security testing is completed in alignment with internal policies and standards.
Coordinate with external third-party providers for vulnerability assessments and penetration testing
Develop remediation plans for all open findings and track through closure
Perform an annual review and update to the Secure SDLC standards
Coordinate with technical teams to ensure WAF coverage of all Internet-facing web applications.
Integrate secure design into the SDLC processes along with automated security testing practices
Prepare monthly reporting and metrics
In partnership with the application owner, conduct annual risk assessments for each application in inventory
Support internal and external audit and compliance requirements for secure development, such as PCI DSS and Sarbanes-Oxley (SOX)
Partner with the HR Training Center in the development and deployment of secure code training and mentoring strategies for application development team members.
Practice and comply with all regulations promoting a safe and healthy work environment (i.e. OSHA).
Adhere to privacy; confidential, proprietary company policies and procedures (i.e. HIPAA)
About You:
Bachelor's degree in Computer Science, Engineering, or MIS and minimum of 5 years working experience in software development with 5 years working experience in application security.
Demonstrate proficiencies with industry certifications like: GIAC-GSSP-.NET, GIAC-GWEB, CSSLP.
Understanding and familiarity with common code review methods and standards.
Be a subject matter expert for secure coding, penetration testing and mobile platforms and applications
Knowledge of OWASP tools and secure application development methodologies and practices.
Knowledge of common security requirements for ASP.NET, Java, C#, C , IOS, Android applications.
Proven and verifiable experience with tools like: Fortify, Veracode, Qualys, IBM AppScan, HP Webinspect, Accunetix, Burpsquite Pro.
Technical and analytical experience, with a proven background in software development (ASP.NET, ASP, PHP, Java, Python, C , etc).
Practical experience onboarding applications to Web-Application Firewalls and tuning policies to protect against common web attacks
Experience with securing intra-company and third-party API's
Solid understanding of network and web protocols
Experience with completing application risk assessments and threat modeling
Experience with authentication and cryptography controls and measures to secure applications and data.
Strong customer service focus and attention to detail.
Possess excellent oral and written communication skills.
Ability to present ideas in a business-friendly and user-friendly language.
Ability to effectively prioritize and execute tasks in dynamic and high-pressure environments.
Ability to maintain confidentiality.
Ability to investigate and document findings.
Proven analytical and problem-solving abilities.
Familiarity with risk mitigation strategies and incident response and handling.
Ability to work independently as well as in a team.
Competent in Windows based computer applications (Microsoft Office).
Why work at EVO?
Learn from and grow with a worldwide payments industry leader
Enjoy a competitive salary and a comprehensive benefits package: 401k with match, generous paid time off, medical, dental, vision coverage plus health savings accounts and much more
Thrive in a collaborative culture that supports innovation
Take advantage of a supportive work-life balance
Benefit from global career opportunities and advancement
**MEMBERS ONLY**SIGN UP NOW***. is a leading payment technology and services provider. EVO offers an array of innovative, reliable, and secure payment solutions to merchants ranging from small and mid-size enterprises to multinational companies and organizations across North America and Europe. As a fully integrated merchant acquirer and payment processor in over 50 markets and 150 currencies worldwide, EVO provides competitive solutions that promote business growth, increase customer loyalty, and enhance data security in the markets it serves.
Disclaimer
The preceding position description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications required of employee assigned to this position.
EVO Payments Inc. is an equal opportunity employer, committed to the hiring, advancement and fair treatment of individuals without regard to race, color, religion, gender, sexual preferences, age, national origin, ethnicity, disability or veteran status, or any other protected status designated by federal, state, or local la
Job Criteria:
Start Date:
Position Type: Full-Time Permanent
Years of Experience Required:
Education Required:
Overnight Travel:
Vacation Time:

Company info

Sign Up Now - MiamiCrossing.com