Client: Prime Therapeutics

Role: Application Security Engineer

Location: Remote

Duration: 8/31/2022

VMS: PRMJP00006540

Business Overview:

Purpose:

The application security engineer shall have extensive experience in the involvement and understanding of cloud security controls (security-as-code) and Prime's target cloud infrastructure Google Cloud Platform (GCP).
Must be proficient in reading, writing, analyzing and assessing Terraform code/scripts and conducting security code-reviews

Position Overview:

Daily Responsibilities/Job Description:

Reading, writing, analyzing and assessing code/scripts for security vulnerabilities.
Running various application security testing tools and interpreting their findings
This position will focus on reviewing the current security-as-code infrastructure and the security of applications deployed in GCP.
This position will have an in-depth understanding of CI/CD development processes, tools and technologies and will be responsible for promoting security code changes through the CI/CD pipeline.
This position must have a solid understanding of python, git, and other development languages is necessary.
This role will also require that the individual be familiar with current and emerging cloud technologies and tools.

Skills Overview:

Qualifications/years of experience: 3-5yrs Experience working with:

application development tools and practices
Automation, CI/CD tools
Integrating security into application development (e.g. code reviews, security testing)
Prior Cybersecurity or some Information security experience

Must Haves:

Reading, writing, analyzing and assessing code in one or more languages (Java preferred)
Public (AWS, Azure, GCP) or private cloud (VMware, Dell/EMC) IaaS/PaaS/aPaaS experience
Familiarity with application security issues and mitigation (e.g. OWASP Top 10)
Familiarity with security concepts (Risk management, vulnerabilities, threats)

Nice to Haves Requirements:

Experience with Google Cloud Platform, Hashi Sentinel Policy, Cloud Formation, Amazon Web Services
Atlassian tools (ex: Confluence, JIRA), Git (ex: BitBucket, Github), Testing and test automation (ex: Selenium, Mockito), CI/CD (ex: Jenkins, GitHub Actions)
Ansible, Terraform, CloudFoundry, Kubernetes, Docker, IaC

Additional Requirements:

Soft Skills Needed:

Good communication and documentation skills
Team player and collaborative
Accountable and willing to tackle new challenges
Good researching skills
Critical thinking and problem solving

Best vs Average Worker:

Experienced (high performer)

Performance Measurements:

Meeting deadlines, quality of work, collaboration with others

Required Skills : Word

Basic Qualification :

Additional Skills :

Background Check :Yes

Drug Screen :Yes

Notes :Terraform is not a hard requirement here

Selling points for candidate :

Project Verification Info

Exclusive to Apex :No

Face to face interview required :No

Candidate must be local :No

Candidate must be authorized to work without sponsorship ::No

Interview times set : :No

Type of project :Development/Engineering

Master Job Title :Security Engineer

Application Security Engineer

Job description