Teamwork. Integrity. Dedication.
Together, we make a difference.
If you are a career-minded, service-driven professional looking to join a fast paced organization then you have come to the right place. AAA is a member service organization affiliated with the national AAA network. With offices across the U.S., we're united by common mission and common values of excellent member service. With more than 13,000 employees in 21 states, we provide legendary service to 15 million loyal members. With a constantly growing membership, we are always welcoming dedicated professionals looking to challenge themselves and build a career within our dynamic organization. You will find that being part of a very successful team is extremely rewarding.
The Automobile Club of Southern California is seeking career-minded individuals for our Applications Security Engineer/Consultant opportunity in our Los Angeles office (LAHQ).
This role is an essential part ofthe Application Security Program implementation in ACE addressing one of keyrisks for the company. This position will help define and validate theimplementation of application security controls on ACE systems andapplications. The Applications Security Engineer will contribute to theimplementation of new security standards and processes within ACE's applicationdevelopment community.
Integrating security tools, standards, and processes into the software development life cycle (SDLC).
Ensuring that developers and QA personnel are trained with the appropriate level of security knowledge to perform their daily activities.
Improving and supporting application security tool deployments including static and dynamic analysis and runtime testing tools.
Improving and maintaining secure development standards.
Supporting the incident response and architecture review processes whenever application security expertise is needed
Assisting with application framework and perimeter security improvement projects.
Supporting Vendor Security activities to ensure 3rd-party software and development meets security standards.
Assisting with identifying security requirements for test-driven design.
Producing metrics reporting the state of application security programs and performance of development teams against standards.
6-8 years related experience and/or training; or equivalent combination of higher education and experience
Thoroughunderstanding of the OWASP 10 Ten and/or SANS Top 25 application securityvulnerabilities, how to detect then, fix them, and most importantly, how toexplain them to developers.
Experience inperforming testing of new and existing applications for securityvulnerabilities.
Knowledge of programming language and development tools in any of the following technology stacks:
Windows Development API's including C#, .NET architecture, WMI, Active Directory, etc.
C/C , GNU tool-chain, Linux development environment (core java) and scripting in Linux shells.
Mobileapplication development: Objective-C, Swift, Lua, etc.
A solid foundation in computer science, with strong competencies in data structures, design patterns, object-oriented programming, algorithms and software design.
Strong fundamentals of topics in Operating systems (e.g. virtual memory, IPC, processes, threads, kernel, scheduler, I/O, file systems
Excellent analytical skills with the ability to resolve technical issues as both an independent thinker and team member with a focus of action with results.
Good verbal and written communication skills
Background in web and/or mobile application security and penetration testing techniques
Experience with an application security testing tool or tools such as HP Fortify, VeraCode, Contrast, Checkmarx, ZAP, etc.)
Ability and willingness to quickly learn new skills, flexibility to work in an agile and fluid environment
Experience with integrating security tasks into development processes
Participated in security operations support and incident handling
Health Coverage for Medical, Dental, Vision
Paid time off including Vacation, Illness and Holidays
401k Savings Plan
Career opportunities across multiple business lines and states
'Creating members for life by exceeding our members' expectations through valuable products and legendary service.'
AAA is an Equal Opportunity Employer.
The Automobile Club of Southern California will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable federal, state and local laws, including the City of Los Angeles' Fair Chance Initiative for Hiring Ordinance.
AAA Of Southern California