Senior Application Security Auditor

1 week ago

Dimondale Michigan, United States Stafford Gray Full time
Position Overview:
This role offers a hybrid work environment, requiring two days on-site and three days remote. Candidates must be local at the time of application.

Job Summary:

We are seeking a Senior Application Security Auditor who is dedicated to the design and development of secure applications and platforms. This position focuses on conducting Dynamic, Static, and Software Composition Analysis assessments.

This role is distinct from the Security Operations Center, as it collaborates closely with software development teams to promote secure coding methodologies.

The ideal candidate will possess the ability to engage effectively with front-end, back-end, and cloud application developers.

By partnering with distributed teams, you will help revolutionize the way systems are constructed, secured, authorized, and operated to ensure ongoing compliance and risk management.

In particular, this individual will spearhead initiatives to implement security frameworks and practices utilizing orchestration and automation tools that facilitate secure configuration, verification, compliance, and system authorization.

You will play a crucial role in advancing the organization's secure software development practices.

Key Responsibilities:
  • Utilize Chrome/Firefox/Edge Development tools to analyze request/response headers.
  • Employ Application Security scanning tools (SAST, DAST, SCA, ASOC, Container/Cloud) as a fundamental requirement.
  • Experience with tools such as Coverity, BlackDuck, STRM, and Fortify is advantageous.
  • Analyze HTTP Request/Response headers for web and RESTful API interactions.
  • Provide detailed explanations of the OWASP Top 10 vulnerabilities.
  • Address Cross-Site Scripting, Injection attacks, SSRF, CSRF, XML entity issues, etc.
  • Ensure API Security and familiarity with JWT.
  • Implement OAUTH/OIDC/PKCE protocols.
  • Understand web and API replay attacks.
  • Possess a high-level understanding of containerization.
  • Demonstrate cloud development experience across platforms such as Azure, AWS, and GCP.
Qualifications:

A minimum of 5 years of comprehensive IT experience is required.

At least 3 years of experience in applying Federal, Industry, and Open-Source Security Guidance and Secure Coding Practices (including OWASP Top 10, SANS, CERT, CWE Top 25, Critical Security Controls, Cloud Security Alliance, SafeCode, etc.)

3 years of proficiency in both compiled and interpreted languages, including Angular, React, Java, Spring Boot, IBM WebSphere App Server, and Oracle JBoss, as well as .NET stacks.

3 years of experience in networking, infrastructure, secure application development, and security automation (DevSecOps).

3 years of hands-on experience in building and deploying secure, complex distributed web and mobile applications.

  • Application Security Auditor

    4 weeks ago

    Dimondale, United States Stellar Professionals Full time

    Job DescriptionJob DescriptionApplication Security AuditorWe are looking for local candidates in Lansing, MI for hybrid role.Applicant must have 4 years of experience with the following : 3+ years implementing/utilizing Federal, Industry and Open-Source Security Guidance and Secure Coding Practices (OWASP Top 10, SANS, CERT, CWE Top 25, Critical Security...

  • Senior Full Stack Application Development Security Auditor

    6 days ago

    Dimondale, Michigan, United States CapLeo Global Full time

    Job SummaryCapLeo Global is seeking a highly skilled Senior Full Stack Application Development Security Auditor to join our team. As a key member of our organization, you will be responsible for designing and building secure platforms and applications through Dynamic, Static and Software Composition Analysis assessments.Key ResponsibilitiesPartner with...

  • IT Security Auditor

    4 weeks ago

    Dimondale, United States Ideal Force Full time

    Job DescriptionJob DescriptionIDEALFORCE has a CONTRACT position available immediately for a IT Security Auditor to join our customer in Dimondale, MI. This is an Hybrid position. Please find below additional details about this job. Kindly respond with your most up to date resume if you would like to pursue this opportunity.IT Security Auditor - Job...

  • Cyber Security Auditor

    1 week ago

    Dimondale, Michigan, United States Syntricate Technologies Full time

    Position Title: Cyber Security Auditor - MCS - IT Security Auditor Location: Remote Job Overview:We are seeking a dedicated Cyber Security Auditor with a strong background in IT Security to join our team at Syntricate Technologies. This role focuses on enhancing secure coding practices and ensuring the integrity of our software development processes.Key...

  • IT Security Auditor

    4 weeks ago

    Dimondale, United States Sunrise Systems, Inc. Full time

    Job Title: IT Security AuditorLocation: Lansing, MI (Hybrid 2 days a week onsite and 3 days working from home)Duration: 12 months of contractTop Skills & Years of Experience:Minimum of 5+ years of total IT related experience.3+ years implementing/utilizing Federal, Industry and Open-Source Security Guidance and Secure Coding Practices (OWASP Top 10, SANS,...

  • IT Security Auditor

    4 weeks ago

    Dimondale, United States Sunrise Systems Inc Full time

    Job Title: IT Security Auditor Location: Lansing, MI (Hybrid 2 days a week onsite and 3 days working from home) Duration: 12 months of contract Top Skills & Years of Experience: Minimum of 5+ years of total IT related experience. 3+ years implementing/utilizing Federal, Industry and Open-Source Security Guidance and Secure Coding Practices (OWASP...

  • Cybersecurity Application Auditor

    1 week ago

    Dimondale, Michigan, United States Sunrise Systems Inc Full time

    Job Title: IT Security Auditor Company: Sunrise Systems Inc Location: Hybrid (2 days onsite, 3 days remote) Contract Duration: 12 months Required Skills & Experience: At least 5 years of comprehensive IT experience. 3+ years of experience in applying Federal, Industry, and Open-Source Security Guidelines along with Secure Coding Practices...

  • IT Security Auditor

    2 weeks ago

    Dimondale, United States TechJordan LLC Full time

    IT Security Auditor @ Dimondale, MI - Onsite Job Interview Process: Virtual Interview via MS Teams with 2nd round interviews being held IN PERSON at the Dimondale, MI office. Candidates submitted MUST be willing to come onsite for a face-to-face interview. A screenshot photo of candidate will be required for any interviews as well as a vendor present at...

  • IT Security Auditor

    4 weeks ago

    Dimondale, United States TekWissen LLC Full time

    Job DescriptionJob DescriptionOverview: Tekwissen group is a workforce management provider throughout the USA and many other countries in the world. The below Client runs through fifteen executive departments which carry out the day-to-day administration of the federal government. Popular departments like Agriculture and Rural Development, Civil Rights,...

  • Cyber Security IT Security Auditor

    1 week ago

    Dimondale, Michigan, United States Syntricate Technologies Full time

    Position Title - Cyber Security - MCS - IT Security Auditor Location - Dimondale, MI Job Overview:Key Skills & Experience Required: Minimum of 3 years of experience in applying Federal, Industry, and Open-Source Security Guidelines along with Secure Coding Practices (including OWASP Top 10, SANS, CERT, CWE Top 25, Critical Security Controls, Cloud Security...

  • Cybersecurity Application Auditor

    1 week ago

    Dimondale, Michigan, United States Sunrise Systems Inc Full time

    Job Title: IT Security Auditor Company: Sunrise Systems Inc Position Overview: We are seeking a highly skilled IT Security Auditor with a focus on application security to enhance our secure software development lifecycle. This role involves collaborating with software development teams to implement secure coding practices and security assessments. Key...

  • IT Security Auditor

    3 weeks ago

    Dimondale, United States Novalink Solutions LLC Full time

    Job DescriptionJob DescriptionSenior Full Stack Application Development Security Auditor who is passionate about designing and building secure platforms and applications through Dynamic, Static and Software Composition Analysis assessments. This position is not a member of the Security Operations Center, rather it is dedicated to working with software...

  • IT Security Auditor

    4 weeks ago

    Dimondale, United States Stafford Gray Full time

    Job DescriptionJob DescriptionPosition will be hybrid - 2 days a week onsite and 3 days working from home. Candidates MUST be local at time of submission. Hiring manager is not currently interested in candidates who will need to relocate to accept offer. Short Job DescriptionSenior Full Stack Application Development Security Auditor who is passionate about...

  • IT Security Auditor

    4 weeks ago

    Dimondale, United States Parintec Full time

    Job DescriptionJob DescriptionTitle: IT Security AuditorDuration: 12 months (with possible extensions)Hybrid: 2 days Onsite every weekLocation: Dimondale, MIInterview: MS Teams Video Interview with 2nd round INPERSON InterviewJob Description:Senior Full Stack Application Development Security Auditor who is passionate about designing and building secure...

  • Senior Application Security Consultant

    1 week ago

    Dimondale, Michigan, United States GTT, LLC Full time

    Job OverviewPosition Title: Application Security AuditorRole Summary:A seasoned Application Security Auditor with a strong focus on developing and implementing secure software solutions through comprehensive assessments including Dynamic, Static, and Software Composition Analysis.Key Responsibilities:Collaborate closely with software development teams to...

  • Security Auditor

    4 weeks ago

    Dimondale, United States Zenfreed, LLC Full time

    Job DescriptionJob Description Senior Full Stack Application Development Security Auditor who is passionate about designing and building secure platforms and applications through Dynamic, Static and Software Composition Analysis assessments. This position is not a member of the Security Operations Center, rather it is dedicated to working with software...

  • Cybersecurity Application Auditor

    1 week ago

    Dimondale, Michigan, United States Sunrise Systems Inc Full time

    Job Title: IT Security Auditor Company: Sunrise Systems Inc Overview: This role focuses on enhancing the security posture of software applications through rigorous assessments and collaboration with development teams. Key Responsibilities: Conduct comprehensive security evaluations of software applications, employing Dynamic, Static, and Software...

  • Dimondale, MI

    4 weeks ago

    Dimondale, United States Syntricate Technologies Full time

    Job Title - Cyber Security - MCS - IT Security Auditor Location - Dimondale, MI Duration - 09/16/2024 to 1 year plus project Req ID - 134181 Job Description: Top Skills & Years of Experience: 3+ years implementing/utilizing Federal, Industry and Open-Source Security Guidance and Secure Coding Practices (OWASP Top 10, SANS, CERT, CWE Top 25, Critical...

  • Cybersecurity Application Auditor

    1 week ago

    Dimondale, Michigan, United States Sunrise Systems Inc Full time

    Job Title: IT Security Auditor Company: Sunrise Systems Inc Overview: This role focuses on ensuring the security of software applications and platforms through comprehensive assessments and collaboration with development teams. Key Responsibilities: Conduct thorough security assessments using Dynamic, Static, and Software Composition Analysis...

  • IT Security Auditor

    3 weeks ago

    Dimondale, United States GSK Solutions Full time

    Job DescriptionJob DescriptionJob Title: IT Security Auditor / Cyber Security (Hybrid) Location:Dimondale, MIDuration: 1 year with possible extension. Pay Rate: $75/hr Interview Process: Virtual Interview via MS Teams with 2nd round interviews being held IN PERSON at the Dimondale, MI office. Candidates submitted MUST be willing to come onsite for a...