Position: Application Security Engineer
Company: HealthJoy
Experience required: 5y
English level: upper

**Your impact:**
- Reduces vulnerabilities, malicious code, and other security issues in released software without slowing down code production and releases

- Mitigates the potential impact of vulnerability exploitation throughout the application lifecycle, including when the code is being developed and when the software is executing on dynamic hosting platforms

- Addresses the root causes of vulnerabilities to prevent recurrences, such as strengthening test tools and methodologies in the toolchain, and improving practices for developing code and operating hosting platforms

- Reduces friction between the development, operation, and security teams in order to maintain the speed and agility needed to support the organization’s mission while taking advantage of modern and innovative technology

**Your Functions:**
- Integrate DevSecOps tools as part of an agile team to achieve Continuous - Integration and Continuous Deployment (CI/CD) applications. (DAST, IAST)
- Develop techniques to ensure development teams find flaws before they are introduced into production (SAST)
- Supports security operations infrastructure (Wazuh, ELK, Palo Alto)

**Your experience:**
- Experience of scripting tools (Jenkins automation server, Ansible tools, Linux shell scripting, etc.)
- Experience working with infrastructure as code systems (terraform)
- Experience with GitLab/Github/Docker/Kubernetes Confluence, etc.
- Experience in AWS infrastructure engineering and administration
- 2 plus years implementing secure coding practices like OWASP Top 10
- 2 plus years of experience securing applications via CI/CD pipelines leveraging static code analysis, unit and integration testing, dependency analysis, etc.
- Application Service Hardening  (CIS, HITRUST, STIGS)
- Web Services Security (Oauth, JWT, OAUTH, SAML)
- English Intermediate or better

**Our rewards.**
Work should be meaningful and rewarding. 

HealthJoy offers a robust package of employee perks and benefits including competitive compensation, unlimited vacations, health insurance, English lessons with a native speaker and full or partial coverage of educational events. 

During the pandemic situation we offer mental health support programs, personal psychological counseling and help with remote work setup.

We also enjoy each other's company over wellness activities,  happy hours, volunteer events in our local communities, lunch and learns, and ‘friendship time’ pairings.