Job Description

I have an urgent APPLICATION SECURITY ENGINEER, ECOMMERCE POSITION (PERMANENT) with our client based in PISCATAWAY, NJ. Base salary between $95,000 to $125,000

We are excited to invite applications to join our Digital Commerce applications group as DevOps Security Engineer supporting B2B, B2B2C and DTC business models.

As eCommerce continues to accelerate, we have a number of exciting projects in the works and are looking for an APPLICATION SECURITY ENGINEER to join our team to help realize our vision.  Our ideal candidate is detail oriented, has excellent verbal and written communication skills, strong organizational skills, able to juggle multiple tasks at once, able to anticipate issues and implement solutions that detect and prevent security issues. The candidate needs to be a self-starter, eager to learn new technologies and have the ability to consider security implications in their designs. You are highly self-motivated and can work well both independently and within a team. You have excellent communication skills, can translate technical jargon into business friendly language to communicate concepts and ideas (and vice versa), and are comfortable working with both technical and non-technical stakeholders.

SPECIFICALLY, THIS POSITION WILL HAVE THE RESPONSIBILITY TO:

Operate across multiple product teams, developing security architecture patterns for implementing new solutions and products; Be able to break code and scan for vulnerabilities and work with the development team to fix code from a security standpoint; Develop, implement, and maintain product security strategy for a range of fast-moving web applications; Work with SIEM Administrators and developers to validate reported vulnerabilities from internal and external sources and provide solutions to address them; Provide recommendations to update existing, or create new, processes and procedures to improve security testing practices; Manage the plan to periodically evaluate existing applications and implement any remediation’s for reported vulnerabilities; Ability to interact with business stakeholders, system integrators and external support providers

BASIC QUALIFICATIONS:

Bachelor's degree in Computer Science, Information Technology, Mathematics, Engineering or similar degree; 5+ building enterprise web applications; Strong experience developing and maintaining web applications built using popular Java based frameworks and Javascript; 3+ years designing/architecting secure systems at scale; Strong experience in web application security issues, standards, and best practices (ex. OWASP); Experience with Digital Commerce platforms such as Commerce Cloud, Magento, Salesforce, Shopify, Big Commerce, SAP hybris etc.; Strong experience in distributed platform development security and design;

Strong foundation in core information security principles and concepts (TLS, authentication, etc.);

Familiarity in public cloud security deployment and implementation issues (ex. GCP, AWS, Azure); Excellent communication, and the ability to explain complex security topics in simple terms; Comfortable navigating ambiguity, with the ability to adapt and work effectively with a variety of situations and technologies; Strong desire to expand technical knowledge; Ability to work on numerous assignments at one time with proven follow-through, attention to detail

PREFERRED EXPERIENCE:

● Basic understanding of RSA, LDAP, and other authentication systems; ● Experience using Bash, Perl, Ruby or other Scripting experience;

● ONE OR MORE OF THE FOLLOWING CERTIFICATIONS; ○ GIAC Certified Incident Handler (GCIH); ○ GIAC Certified Intrusion Analyst (GCIA); ○ GIAC Certified Forensic Analyst (GCFA); ○ GIAC Certified Forensic Examiner (GCFE); ● Knowledge of Atlassian tools (Jira and Confluence, and/or Trello); ● APT Kill Chain experience

SCREENING QUESTIONS

Are you authorized to work in the United States? Will you now or in the future require sponsorship for employment visa status (e.g., H-1B visa status)? Do you possess a Bachelor's degree or higher level degree in Computer Science, Information Technology, Mathematics, Engineering or similar degree? Do you possess a minimum of 5 years of experience building enterprise web applications? Do you have at least 3 years of experience designing/architecting secure systems at scale? Do you have strong experience developing and maintaining web applications built using popular Java based frameworks and Javascript? Do you have strong experience in web application security issues, standards, and best practices (ex. OWASP)? Do you have experience with Digital Commerce platforms such as Commerce Cloud, Magento, Salesforce, Shopify, Big Commerce, SAP hybris etc.? Do you have strong experience in distributed platform development security and design? Does your experience include a strong foundation in core information security principles and concepts (TLS, authentication, etc.)? Do you have familiarity working with public cloud security deployment and implementation issues (ex. GCP, AWS, Azure)?

Additional Information

All your information will be kept confidential according to EEO guidelines.