Application Security Engineer

Job description

DESCRIPTION

Ring is looking for an Application Security Engineer who can support the overall improvement and maturity of the Application Security Program, within Information Security. This role will aide in the identification, triage, and remediation of application security vulnerabilities. The application security engineer position is also responsible for maintaining and improving processes that support the analysis of web, api, thick-client, and mobile applications. This role is also responsible for product security assessment of IoT devices, and the software technologies associated.

Responsibilities
· Embed security enablement practices into new and existing CI/CD pipelines.
· Perform automated and manual code review.
· Participate in software architecture review and design discussions.
· Produce automated SAST and DAST solutions to be used within the SDLC.
· Develop secure coding guidelines and training articles.
· Perform security assessments of new products and technologies. In addition, will help maintain automated detection, monitoring, and troubleshoot vulnerability scanning and assessment tooling.
· Support day-to-day administration of Ring's various bug bounty programs.
· Triage and provide proof of concept demonstrations of Provide support and resolution for scanning and vulnerability remediation reporting issues.

Desired profile

BASIC QUALIFICATIONS

·
· 3+ years' experience working with various networking protocols expected to be used at Ring, specifically regarding both video and content lifecycle.
· 3+ years' working with application security vulnerabilities, OWASP top ten, and the appropriate remediation techniques.
· 2+ years' working with issue and wiki management systems such as Jira and Confluence.
· 2+ years' experience with Oauth2, SAML, and general idp provider technologies.
· 3+ years' experience working with AWS cloud compute services and architectures.