APPLICATION SECURITY ENGINEER
RESPONSIBILITIES:
Develop and maintain technical solutions for the ongoing improvement of Application Security as well as automating and orchestrating repetitive or manual tasks and promoting self-service.
Maintain an understanding of all current and emerging technologies, open system standards, and management technologies as they relate to the support of our business needs.
Provide accurate analysis of business requirements and, in conjunction with the Architecture and Engineering teams, develop solutions to fulfill them, being the main point of contact for client and stakeholder communications.
Perform operational tasks and respond to urgent requests when necessary as well as participating in annual disaster recovery exercises and plan updates.
Create and contribute to knowledge base articles and ensure they are kept up-to-date and provide operational training to partners and team mates in accordance to industry standards.
Perform on-going security testing, code reviews, and work with developers to re -mediate vulnerabilities and minimize the corporate risk profile.
Perform other related assigned duties as necessary to complete the Primary Job Responsibilities as described above.
QUALIFICATIONS:
Position requires a bachelor's degree in information technology or a related field and six years' experience in information technology or security. CISSP Certification is required. An Application Security certifications such as OSCP, OSCE, GPEN, or GWEB is preferred. Will accept any suitable combination of education, training, or experience.
Position requires knowledge in information security principles and practices, Windows and Linux server administration with emphasis on authentication methods such as OAUTH and OIDC; experience with Active Directory, LDAP, E-Directory, Multi-factor, Single Sign On, Certificate based authentication methods, PAM, and credential management; experience or knowledge with industry standard tools such as Vault or SecureAuth preferred; experience with one or more programing languages such as Java, Python, PowerShell, and Xpath; familiarity with Java and Java development; experience with common version-control systems and deployment platforms such as Get, BitBucket, Artifactory, and Jenkins; familiarity with Oracle Weblogic or Oracle Database servers; and experience with Application Security testing tools such as BurpSuite, Zap, Fiddler, Postman, Kali Linux or equivalent tools.
This job's responsibilities may include task assignment to support, administer, or access systems, which contractually requires ADP I or II Public Trust Access Level. Eligibility for ADP Clearance requires US Citizenship.
MINIMUM PHYSICAL EXPECTATIONS:
Physical activity that often requires keyboarding, sitting, phone work, and filing.
Physical activity that often requires extensive time working on a computer.
Physical activity may require lifting under 25 lbs.
Physical activity that sometimes requires travel – car, train, and/or air.
Physical activity that sometimes requires bending, stooping, reaching, climbing, kneeling, and/or
twisting.
Specific vision abilities required include close vision, depth perception, and the ability to adjust and focus.
Must hear and speak well enough to conduct business over the telephone or face to face (in English) for long periods of time.
MINIMUM ENVIRONMENTAL EXPECTATIONS:
This position will require working indoors. Typical workweek is eight (8) hour workdays, five (5) days per week with some weekend work, as well as longer hours as needed. This position deals with some aggressive personalities and could be stressful.
ABOUT DEWPOINT:
We are the premier provider of integrated technology services and solutions with a reputation for solving business challenges and creating trusted relationships with our clients and partners.
A Michigan based company, we focus on providing services and solutions that help organizations solve business challenges with technology. We are a leading systems integrator and technology consulting firm that was established in 1996 and are made up of experienced professionals who have a deep understanding in providing IT solutions to government and commercial clients.
Dewpoint's employees are all company stakeholders. We are responsible and accountable to each other and our clients. The core values all Dewpointer's share are:
Dewpoint employees are all company stakeholders. We work hard, we play hard.
Developing a true sense of community and camaraderie requires company events to bring together Dewpoint employees who are dispersed across different offices and client locations. Our goal is to bring employees face to face for both learning, fun and community involvement.