Application Security Engineer
Enginering Security
Mức lương
Khu vực
Phúc lợi
Laptop/desktop for works
Travel/company trips
Salary review
Others
Full social insurance
Flexible working time
Work-from-home policy
Tổng quan về công việc và trách nhiệm
At ST Engineering iDirect, Application Security Engineer continually work with other technical staff to provide a secure approaches, and enhancements for both current systems and next generation products. Application security engineer is to setup, configure, maintain and troubleshoot automated security testing tools and work with software development teams to ensure that proper security controls are designed and implemented within applications by providing security code review. As an ideal candidate, you like working in the code to integrate and maintain security tooling integration at the code level. - Ability to communicate clearly and concisely, both orally and in writing in English - Ability to distill and present information to developers - Ability to configure and integrated SonarQube and SAST/SCA tools with build jobs. (java and C++) - Ability to work in a group development environment as an application security engineer across software engineer, QA engineer and build/test/release engineer teams. - Ability to set priorities and meet deadlines - Customer service focus, attention to detail, and process orientation - Serve as the subject matter expert (SME) on application security (AppSec) tooling domain knowledge.
Kỹ năng và kinh nghiệm tối thiểu
- You have a bachelor degree in engineering (Computer Science, Computer Engineering, Software Engineering) with 5+ years of experience or have obtained equivalent knowledge through experience. - You must have a strong working knowledge and background with secure software development lifecycle components integration. - Prior experience in integrating/maintaining/supporting/analyzing SAST/SCA scanning tools/results is required. - Prior experience with expert knowledge in SonarQube is required. - Prior experience with Gitlab - Experience in software development of an application using C, C++, Java, and Python in a QA, test automation environment. - Strong understanding of security in both Web Application and Web service architecture. - Experience building automation scripts in Bash, Ruby and Python.
Tại sao ứng viên nên làm ở đây
ST Engineering is one of Asia's largest defense and engineering groups. It has also diversified over the years, and now supplies both military customers and commercial ones in over 100 countries, which cover its four core businesses -- aerospace, land systems, electronics and marine. - Meal allowance & transportation allowance - Laptop - 100% salary from probation - Training from probation - Free learning of all courses on LinkedIn e-learning - Private insurance for employees from probation - SHUI is paid on total Gross Base salary - Annual performance review - Annual salary review - Lots of periodic company gatherings and events.
Ưu tiên có kỹ năng và kinh nghiệm
- CISSLP certification preferred. - Experience with Synopsys Coverity (SAST) and Blackduck (SCA) is preferred
Báo cáo cho
Delivery Manager
Quá trình phỏng vấn
Online interview with US Team (Additional round may be added)
Ứng tuyển vào công việc này
Công việc đã hoàn thành (7)
