Application Security Engineer / Architect Montenegro or Remote
Application Security Engineer / Architect Description
Job #: 83546Description
We are looking for an Application Security Engineer / Architect to conduct application security assessments from start to finish, with minimal assistance from the project team. You will be responsible for increasing security awareness among project teams, working closely with security champions, and helping to deliver secure software.
What You’ll Do
- Work with the clients and project teams to perform applications security assessments
- Act as an expert in specific programming languages and web application environments
- Identify and validate application vulnerabilities, and suggest remediation at architectural and source code levels
- Establish a secure software development life cycle or enhance the existing one by introducing necessary security practices
- Ensure high-quality client service
- Contribute to building a portfolio-wide reference security architecture
- Provide the development and conducting of the security training for development teams
What You Have
- Knowledge of security features provided by at least one operating system (Windows, Linux, Android, iOS, etc.) and development platform/technologies (Java, .NET Framework, databases, etc.)
- Flexibility to use at least one security methodology: Microsoft SDL, OWASP CLASP, etc
- Understanding of the nature of security threats, the most common implementations of the threats (XSS, SQL Injection, XSRF, buffer overruns, brute force, rainbow tables, DoS, etc.) and how they match the general classification
- Competency in security-related activities: risk and privacy assessment, threat modeling, security code review
- Expertise in security principles such as multi-layered protection, areas of protection, levels of defense, and mitigation mechanisms for every type of threat (validation, sanitizing, crypto operations, etc.)
- Familiarity with security standards (PCI DSS, HIPAA, NIST, Common Criteria, etc.) and tools for various activities (static code analysis, pen testing, intrusion detection/prevention, etc.)
Nice to have
- Ability to use the tools to perform actual attacks is a plus
- Certification in any security area is a plus
We offer
- Outstanding career development opportunities with a transparent career path and a roadmap to accelerate your journey
- Knowledge sharing within the community of 61,300+ industry’s top professionals worldwide
- Wide range of professional training, workshops, and mentoring programs plus unlimited access to LinkedIn Learning
- Learning resources and financial support for completing certification programs
- Competitive salary plus annual bonuses for showing outstanding results
- Flexible working schedule and opportunity to work remotely from any place in Montenegro
- Friendly team, and enjoyable working environment
- Relocation opportunities within our offices in 50+ countries
- Corporate health insurance and the possibility of buying private health insurance for the family at a corporate price
About EPAM
- We are a team of 61,300+ technologists, strategists, and designers in 50+ countries. EPAMers help leading brands transform their business through our engineering expertise, design thinking, and business consulting. We foster creativeness and unconventional ways of doing things welcoming like-minded professionals. Our newly opened office in Montenegro is growing fast and offering myriad challenges for you to explore
