See more Collapse

Application Security Engineer

2 months ago

Raleigh, United States Genworth Full time

At Enact Mortgage Insurance (Nasdaq: ACT), we understand that there is no place like home. That is why we bring our deep expertise, insightful offerings, and extra mile service to work every day to help lenders put more people in homes and keep them there.

We are seeking an Application Security Engineer in Raleigh, NC to join our team. In this role, you will enhance our technical security vulnerability management processes, focusing on identifying, triaging, and addressing code, configuration, and patch-related vulnerabilities within our application delivery pipelines and production environments, both on-premises and in the cloud. Join us to advance our mission with a commitment to excellence, continuous improvement, and strong connections.

LOCATION

Enact Headquarters, Raleigh, NC - Hybrid Schedule

YOUR RESPONSIBILITIES

  • Deploy and Operationalize Application Security Tools: Implement and manage a suite of application security tools such as SAST, DAST, and SCA, ensuring their seamless integration into the development pipeline.
  • Educate Application Delivery Team: Conduct training sessions and workshops to educate the application delivery team on secure coding practices, emphasizing the OWASP Top 10 for web apps and APIs, as well as the OWASP Cheat Sheet Series.
  • Support Transition to the Cloud: Define security requirements and evaluate design proposals to support the organization's cloud native approach to refactoring and re-platforming business critical web services in cloud, ensuring all cloud-based applications and services meet security standards.
  • Mentor Junior AppSec Engineer: Provide guidance and mentorship to a junior application security engineer, helping them develop their skills and grow within the organization.
  • Influence Requirements Analysis and Design: Participate in requirements analysis and design phases of new projects to ensure secure software delivery standards are integrated from the outset.
  • Address Security Issues: Identify, assess, and remediate security issues in applications and systems, ensuring vulnerabilities are resolved promptly and effectively.
  • Mediation Between Teams: Function as a mediator between the application delivery and security teams, ensuring clear communication and collaboration on application security matters.
  • Coordinate Penetration Tests: Coordinate and oversee web services penetration tests to identify vulnerabilities and ensure the security of applications.
YOUR QUALIFICATIONS
  • Bachelor's degree in computer science or equivalent and relevant industry experience.
  • Current or former software engineer with experience delivering business-critical web services, including application programming interfaces (APIs).
  • Practical experience working with scripting languages or popular web framework.
  • Strong grasp of the OWASP Top 10 for web apps and APIs, as well as the OWASP Cheat Sheet Series.
  • Experience with static application security testing (SAST) and dynamic application security testing (DAST).
  • Experience conducting secure code reviews for critical aspects of web services to ensure robust security and compliance.
  • Proven ability to influence requirements analysis and design, and address security deficiencies effectively.
  • Strong ability to educate software engineers in secure coding practices.
  • Proven ability to mediate between application delivery and security teams.
  • Experience mentoring junior engineers.
  • Effective communication and collaboration skills.
PREFERRED QUALIFICATIONS
  • Experience conducting or coordinating web services penetration tests.
  • Experience in securing serverless, containerized, and event driven environments.
  • Experience securing CI/CD pipelines.
  • Experience supporting industry leading web application firewalls through the creation of custom rules to filter and mitigate current and emerging threats.
COMPANY

Enact is a leading publicly traded U.S. private mortgage insurance provider, offering borrower-centric products that enable lenders and other partners across the U.S. to help people responsibly achieve and maintain the dream of homeownership.

By empowering customers and their borrowers, Enact seeks to positively impact the lives of those in the communities in which it serves in a sustainable way. Headquartered in Raleigh, North Carolina, we play an active role in supporting a healthier Triangle community. We also support our colleagues' philanthropic efforts in their home communities across the U.S.

Enact values all perspectives, characteristics and experiences, and DEI remains at the forefront of what we do. We strive to create an environment where employees can bring their full, authentic selves to work to help each other and their customers.

We are proud to be an equal opportunity employer and all hiring decisions are based on merit, qualifications, and business needs. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.

WHY WORK AT ENACT

We bring innovative thinking to the situations at hand.

We seek out and incorporate diverse views to strengthen our outcomes.

We work on challenging and rewarding projects.

We offer competitive benefits:
  • Hybrid work schedule (shared in-office days Tues/Wed/Thurs)
  • Generous Time Off
  • 40 Hours of Volunteer Time Off
  • Tuition Reimbursement and Student Loan Repayment
  • Paid Family Leave and Flexible Spending Accounts
  • 401k with up to 5% employer match
  • Fitness and Emotional Wellness Reimbursements

We have other current jobs related to this field that you can find below

  • Application Security Engineer

    2 months ago

    Raleigh, United States Genworth Full time

    At Enact Mortgage Insurance (Nasdaq: ACT), we understand that there is no place like home. That is why we bring our deep expertise, insightful offerings, and extra mile service to work every day to help lenders put more people in homes and keep them there.We are seeking an Application Security Engineer in Raleigh, NC to join our team. In this role, you will...

  • Sr Power Application Engineer

    2 weeks ago

    Raleigh, United States Analog Group Inc Full time

    Sr Power Application Engineer Job Description and Responsibilities: Privately held semiconductor company with exciting new products for power conversion. We are looking for aSr Applications Engineer to become an integral part of the newly formed AC-DC products group. Our Power Products have industry leading metrics of power density, efficiency and switching...

  • Sr Power Application Engineer

    1 month ago

    Raleigh, United States Analog Group Inc Full time

    Sr Power Application Engineer Job Description and Responsibilities: Privately held semiconductor company with exciting new products for power conversion. We are looking for a Sr Applications Engineer to become an integral part of the newly formed AC-DC products group. Our Power Products have industry leading metrics of power density, efficiency and...

  • Security Engineer

    3 days ago

    Raleigh, United States The Judge Group Full time

    Our client is currently seeking a Security Engineer - I Security Analyst/Engineer Responsibilities: The Security team is responsible for management of Managed Security Services for customers in our Government Network Operations and Security Center (GNOSC). Typical duties include security event analysis/investigation/escalation and change management including...

  • Sr. Security Engineer

    2 months ago

    Raleigh, United States Lucid Full time

    Lucid Software is the leader in visual collaboration, helping teams see and build the future from idea to reality. We hold true to our core values: innovation in everything we do, passion & excellence in every area, individual empowerment, initiative and ownership, and teamwork over ego. At Lucid, we value diversity and are dedicated to creating an...

  • Senior Cyber Security Engineer

    2 weeks ago

    Raleigh, United States Ally Full time

    General information Ref # 17761 Remote? No Ally and Your Career * Ally Financial only succeeds when its people do - and that’s more than some cliché people put on job postings. We live this stuff! We see our people as, well, people - with interests, families, friends, dreams, and causes that are all important to them. Our focus is on the health and...

  • Applications Engineer

    2 weeks ago

    Raleigh, United States Andritz Full time

    Every day, ANDRITZ continues to deliver successful innovative solutions to our customers globally. Why are we so successful? Because we are passionate and love what we do! We are at the forefront of future engineering technologies, with solutions that ensure the success of our clients in key industries that are shaping the future of the world we live in....

  • Applications Engineer

    3 months ago

    Raleigh, United States ANDRITZ AG Full time

    Every day, ANDRITZ continues to deliver successful innovative solutions to our customers globally. Why are we so successful? Because we are passionate and love what we do! We are at the forefront of future engineering technologies, with solutions that ensure the success of our clients in key industries that are shaping the future of the world we live...

  • Azure Cyber Security Engineer

    3 months ago

    Raleigh, United States Southern Talent Specialists Full time

    Job DescriptionJob DescriptionAzure Cyber Security EngineerSummaryThe Cyber Security Engineer – Threat Management is responsible for second level security event/incident response along with the collection, analysis, and dissemination of cyber threat intelligence. These capabilities will include timely collection of advanced warning of impeding IT...

  • Software Engineer Modeling Simulation Application Developer

    2 months ago

    Raleigh, United States Kelaca Full time

    Kelaca is seeking a Software Engineer-Modeling & Simulation Application Developer Consultant to work in a Hybrid capacity for a long-term engagement with our client partner in Raleigh, NC.We are actively seeking a qualified software engineer who will support their growing business in modeling and simulation of physical phenomena within a 3D geometric...

  • Principal Cyber Security Engineer

    2 weeks ago

    Raleigh, United States Ally Full time

    General information Ref # 17728 Remote? No Ally and Your Career Ally Financial only succeeds when its people do - and that’s more than some cliché people put on job postings. We live this stuff! We see our people as, well, people - with interests, families, friends, dreams, and causes that are all important to them. Our focus is on the health and...

  • Cyber Security Engineer

    2 weeks ago

    Raleigh, United States Curi Full time

    Description About Us Curi is a full-service advisory firm that serves physicians and medical practices. Equal parts fierce physician advocates, smart business leaders, and thoughtful partners, Curi's advisory, capital, and insurance offerings deliver valued advice that is grounded in client priorities and elevated by their outcomes. From data-driven advisory...

  • Software Engineer

    3 months ago

    Raleigh, United States Kelaca Full time

    Job DescriptionJob DescriptionKelaca is seeking a Full Stack Application Developer Consultant to work in a Hybrid capacity for a long-term engagement with our client partner in Raleigh, NC. We are actively seeking a qualified Software Engineer who will support our growing business in modeling and simulation of physical phenomena within a 3D geometric...

  • Cloud Security Engineer

    2 weeks ago

    Raleigh, United States Greensboro Staffing Consultants Full time

    Job DescriptionJob DescriptionSeeking a Cloud Security Engineer with healthcare industry experience. Must have proven ability to secure cloud deployments and protect sensitive data. Skilled at working with senior management to develop and implement security strategy. Responsible for managing and supporting AWS Cloud infrastructure, creating technical...

  • Cloud Security Engineer

    4 months ago

    Raleigh, United States Greensboro Staffing Consultants Full time

    Job DescriptionJob DescriptionSeeking a Cloud Security Engineer with healthcare industry experience. Must have proven ability to secure cloud deployments and protect sensitive data. Skilled at working with senior management to develop and implement security strategy. Responsible for managing and supporting AWS Cloud infrastructure, creating technical...

  • Applications Engineer

    3 months ago

    Raleigh, United States ANDRITZ Full time

    Summary: Reporting to the Director of Forming Technology, this position’s main objective is design and application of machine clothing products for Andritz. This position is directly responsible for providing support to Sales, Manufacturing, Customer Service, Research, and Marketing for machine clothing products. Job Responsibilities: Specifies...

  • Applications Engineer

    3 months ago

    Raleigh, United States ANDRITZ Full time

    Summary: Reporting to the Director of Forming Technology, this position’s main objective is design and application of machine clothing products for Andritz. This position is directly responsible for providing support to Sales, Manufacturing, Customer Service, Research, and Marketing for machine clothing products. Job Responsibilities: Specifies...

  • Internal Applications Engineer

    2 months ago

    Raleigh, United States Bandwidth Full time

    Job DescriptionJob DescriptionWho We Are:Bandwidth (NASDAQ: BAND) is a global communications software company that helps enterprises connect people around the world with cloud-ready voice, messaging and emergency services. Backed by a network reaching 60+ countries covering 90 percent of global GDP, companies like Cisco, Google, Microsoft, RingCentral, Uber...

  • Internal Applications Engineer

    2 months ago

    Raleigh, United States Bandwidth Full time

    Job DescriptionJob DescriptionWho We Are:Bandwidth (NASDAQ: BAND) is a global communications software company that helps enterprises connect people around the world with cloud-ready voice, messaging and emergency services. Backed by a network reaching 60+ countries covering 90 percent of global GDP, companies like Cisco, Google, Microsoft, RingCentral, Uber...

  • Applications Engineer

    2 months ago

    Raleigh, United States Andritz Full time

    Every day, ANDRITZ continues to deliver successful innovative solutions to our customers globally. Why are we so successful? Because we are passionate and love what we do! We are at the forefront of future engineering technologies, with solutions that ensure the success of our clients in key industries that are shaping the future of the world we live in....