Senior Cyber Security Application Security Engineer
- Blackbaud
- 3 - 8 years
- Hyderabad
- 4 months ago
- Email to a friend
- Report this job
Job Description
As a member of the Cyber Security organization at Blackbaud, the Application Security Engineer is a specialized position that plays a key role in securing software built and/or used by Blackbaud.You can expect to work closely with software development teams as well as third-party organizations to ensure that security, privacy, and compliance requirements are planned for, designed, and built into software applications at Blackbaud. In addition to securing software, you will be expected to stay up to date on whats happening in the Cyber Security industry to optimize and align our application security processes and systems throughout the Software Development Life Cycle (SDLC) at Blackbaud. The Application Security Engineering team focuses on building automation for security self-service and vulnerability management to reduce unnecessary toil.What you will be doing:- Identifying solutions for difficult security problems while participating in a broader agile Application Security team.
- Building comprehensive solutions to conduct consolidation, aggregation, andnotification of security findings to respective stakeholders.
- Conducting threat modeling, secure design reviews, and providing direct guidance to development teams.
- Promoting, designing, and evaluating application security in all phases of theSDLC and constantly looking for innovative ways to improve processes.
- Influencing, building, and assisting with information security challenges within applications.
- 5+ plus years of experience with application security and relevant testing tools for:
- DAST: Burp Suite, OWASP Zap, Invicti, AppScan
- SAST/SCA: Fortify, Checkmarx, Coverity, Semgrep, OWASP Dependency Check, Mend, Blackduck
- Attack Surface Management: OWASP Amass, Spiderfoot, CyCognito
- 3+ years of experience with Python, Bash, and/or PowerShell.
- 3+ years of experience in DevSecOps integrating security solutions into CI-CD pipelines and automated tooling orchestration.
- Relevant certifications include CompTIA Security+ or CASP+, EC Council CEH, ISC2 CSSLP are a plus.
- Experience partnering with development and systems engineers on impactful securityinitiatives.
- Understanding of software development; how applications and systems are designed, built, and break is critical.
- UnderstandDevSecOpscultural mindsets, and an engineering-focused approach to solvingcomplexsecurity problems.
- Strong verbal and written communication skills to translate security objectives and requirements to specific engineering outcomes.
Job Classification
Industry: IT Services & ConsultingFunctional Area / Department: IT & Information SecurityRole Category: IT SecurityRole: Cyber SecurityEmployement Type: Full timeContact Details:
Company: BlackbaudLocation(s): Hyderabad+ View Contact
Keyskills: python application security powershell bash devsecops continuous integration burp suite scr cyber security owasp appscan ceh information security dast fortify owasp zap threat modeling testing tools security engineering sast coverity
Fraud Alert to job seekers!
₹ Not Disclosed
Similar positions
Job Listings
We are in open beta version of website, please let us know if any issues, at: info(at)indigojobs.in