Cyber | Level 3 (USD)

About the role

Software Guidance & Assistance, Inc. (SGA) is seeking an Application Security Engineer for a contract assignment with a premier Investment Banking client in Alpharetta, GA or New York, NY. The Cloud Security & Developer Enablement team implements the firm’s Cybersecurity Strategy by architecting, engineering, deploying, and operating technical security controls and capabilities for the enterprise, focusing on architectural rigor, automation, agile delivery, and adoption of cloud and application security controls by the development community.

Responsibilities

• Work with Development, DevOps, and Security teams to identify and develop automated security and compliance capabilities in support of DevSecOps processes.
• Define security rules to be adhered to at the code level in web and mobile applications written in .NET, Java, React, Python, and other languages.
• Provide a secure, stable platform for enforcing application security controls using development and security expertise.
• Support security standards, design, and implement architectural patterns to increase the resiliency and scalability of the security platform.
• Collaborate with partners to implement, manage, and optimize security measures within GitHub repositories to continuously improve code integrity and protect against vulnerabilities.
• Implement firm-specific security policies in CI/CD security tools including SAST, OSS, and SCA applications.

Required Skills

• 5+ years of software development experience using Python.
• Experience working with APIs, including ReST.
• Experience with unit testing frameworks.
• Experience with multi-process and multi-thread architecture.
• 5+ years in Linux; strong Bash scripting skills.
• Deep understanding of CI/CD pipelines.
• Working knowledge of Windows environments, including simple scripting (DOS batch, etc.).
• Bachelor’s degree with 10+ years of IT work experience.
• Ability to process large datasets for reporting and analysis.

Preferred Skills

• Self-starter with a strong desire to learn new technologies and apply them to solve problems.
• Knowledge of SAST and OSS technologies.
• Ability to perform Python code reviews with minimal assistance.
• Expertise in monitoring, alerting, reporting, and data analysis.
• Experience with application build environments such as Jenkins, GitHub Actions, and TeamCity.
• Experience with DevOps container/orchestration tools (Kubernetes, Docker, Puppet, etc.).
• Experience with evaluation, integration, and onboarding of security tools such as DAST, RASP, WAF, vulnerability scanners, container analyzers, and open-source scanning.