Application Security Engineer - Sast, Dast

Required Skills: Develop policy and standards for API security.

Experience and knowledge in Application Programming Interface (API), static application security testing (SAST) and related tools like Veracode / Checkmarx / Fortiy. Experience and knowledge in Burp Suite tool for dynamic testing (DAST). Primarily responsible for API application security but with a good working knowledge of other security domains (Cryptography, Identity and Access Management, Threat and Vulnerability Management) At least 4 years of working experience in application security that includes API, SAST and DAST along with Checkmarx, Veracode Primarily responsible for application security but with a good working knowledge of other security domains (Cryptography, Identity and Access Management, Threat and Vulnerability Management). Knowledge of security technologies (encryption, data protection, design, privilege access, etc.) Proficiency in planning, reporting, establishing goals and objectives, standards, priorities and schedules Excellent decision-making, analytical and problem solving skills Excellent verbal and written communication skills to technical and non-technical audiences of various levels in the organization Strong knowledge of development and application security Knowledge of information security principles, web applications, and intermediate familiarity with malicious code and common hacking techniques used by malicious actors Experience conducting risk assessments and performing threat modeling of applications