Position: Application Security Engineer
Company: EIS
Experience required: 2y
Category: Security
English level: intermediate
Published: 2022-02-01T00:00:00+02:00

We are looking for smart, dynamic, and intuitive people to join our growing team of technology professionals and industry experts.

Application Security Engineer position will enable us to perform in-depth technical application security analysis, identify and help remediate vulnerabilities before Advanced Persistent Threats do. This is a hands-on technical AppSec-focused role requiring significant prior experience specifically in web AppSec.

Responsibilities:
- Implementing EIS Secure Software Development Process
- Performs code review and white-box testing of web applications and their APIs
- Reviews software architectures for secure design issues, providing a design review service to project teams
- Integrates Application Security automation solutions into DevOps pipeline
Implements static code analysis customizations
- Develops and employs application-specific security testing automation

Communications
- Responds to technical security challenges and questions faced within EIS RnD
- Communicates nature and impact of identified application security deficiencies as well as their potential solutions
- Provides training to other teams on software security, including information from the OWASP framework

Requirements:

- Possesses deep technical/functional expertise and knowledge in software security (OWASP ASVS and OTG, at a minimum)
- Utilizes security tools, utilities, and processes (Burp Suite Pro, advanced knowledge)
- Deeply experienced in manual software security analysis
- Experienced in JavaEE and its security model
- Experienced in Python security automation

The following skills would be a plus:

- Secure Software Architecture
- Secure SDLC implementation experience
- Cloud-native web application security
- Docker and microservice security
-Prior experience as a JavaEE developer

What we offer:

- Variety of new knowledge sharing and training opportunities
- Unique international working environment
- Сompetitive salaries
- Paid vacation and sick leave
- Medical insurance
- Various social and team-building activities
- English lessons

About EIS
EIS is a global innovator, providing the insurance industry with transformational platforms to enable its success. We are committed to delivering tools, digital enablement, and exploring emerging technologies that drive efficiency and empower clients to reimagine the possible.
Our culture is highly innovative, collaborative, and focused on building and maintaining relationships that allow us to surpass our customers’ expectations. We embrace the qualities that make each of our team members unique and develop each other’s skillsets so that together we can be stronger than the sum of our parts.