Application Security Analyst for AWS Java and Python Apps

Skills required: * Advanced experience in secure code reviews in Java, C++, Python, JavaScript using SCA tools for false positives and assi...

Skills required:

• Advanced experience in secure code reviews in Java, C++, Python, JavaScript using SCA tools for false positives and assist developers in remediation.
• Advanced knowledge in secure coding techniques, CWE Top 25, OWASP and known cross-language as well as platform-specific weaknesses
• Experience in designing automation for usage of security tools in Continuous Integration Pipeline to enable frictionless usage by developers.
• Experience with overall security aspects of Terraform.
• AdvancedexperienceinfollowingAWS services.
  • Design and implementation AWS Key Management Service and CloudHSM
  • Design and implementation of data encryption for Data at Rest (DaR) and Data in Transit (DiT)
  • For DaR, experienced in implementation with AWS Aurora, AWS EBS, AWS S3, AWS RDS
  • For DiT, experienced in implementation of certificate management lifecycle using ACM
• Some understanding and experience with equivalent services in Azure
• Experience in secure development life-cycle (SDLC) practices including threat modeling and security testing.
• Strong, proven problem-solving skills and ability to identify, analyze, and resolve problems, driving work through to completion.

REQUIRED SKILL LEVEL

• Secure Code Review in Java, C++, Python, JavaScript (Senior level experience)
• Advanced experience in AWS services (Senior level experience)
• Advanced knowledge in secure coding techniques (Senior lever experience)
• Automation for usage of security tools in Continuous Integration Pipeline (Junior level experience)