Senior Information Security Engineer

Threat Vulnerability; AI; API; CI/CD; Endpoint Security; Firewall; Java; JavaScript; Responsive Web Design; REST Web Services; AWS; Azure; GCP; Go; Kotlin; React / React JS **Job Description:** - Conducts security risk assessments of applications with respect to design and implementation of system and application code **Minimum Requirements:** - 6-9 years of information security experience - Experience with gathering functional requirements, deployment of information security tools, and data analysis - In-depth experience with desktop software and office automation tools - Experience with information security risk management and process improvement - Experience with implementing security governance and risk management processes **Preferred Qualifications:** - Experience with threat modeling frameworks, attack vectors and vulnerability analysis: CAPEC, ATT&CK, STRIDE. - Experience with application security controls (Web, API, Mobile, AI). - Experience with common information security management and application frameworks: NIST 800-53, CSF, OWASP ASVS. - Experience with Application Security design and DevSecOps - Experience in developing, documenting and maintaining security policies, processes, procedures and standards. - Full stack knowledge of application architectures including: Single Page Applications, REST APIs, SOAP APIs, Mobile Applications. - Experience with Java, Javascript and mobile application development. - Knowledge or familiarity with database architectures including Oracle, SQL, DB2 and NoSQL Databases - Experience with Cloud security, architecture, design, implementation, and operations - Exposure to IAM Controls (OAuth 2.0, OIDC, JWT) - Strong familiarity with Cryptography Controls (Data at rest, in motion). - CISSP, CISM, CSSLP, CISA, CRISC PRB