Location: Multiple Locations (Middle East and Africa (MEA), North America, Europe, Asia-Pacific)

Company: IAISP (International Association of Information Security Professionals)

Are you a security professional with a passion for safeguarding software applications? Do you excel in conducting security assessments and implementing controls throughout the software development lifecycle? IAISP is looking for an experienced Application Security Engineer to join our team and enhance the security of our software applications.

About IAISP:
IAISP (International Association of Information Security Professionals) is a global leader in advancing information security through innovation, collaboration, and professional development. With a strong global presence, IAISP is instrumental in shaping cybersecurity practices, providing cutting-edge services, and driving initiatives to enhance information security worldwide.

Role:
As an Application Security Engineer, you will be responsible for securing the organization’s software applications from vulnerabilities and threats. You will conduct security assessments, integrate security controls into the software development lifecycle, and work closely with developers to address and remediate security issues.

Responsibilities:

• Conduct Security Assessments: Perform security assessments of software applications to identify vulnerabilities and security weaknesses through techniques such as static and dynamic analysis, code reviews, and penetration testing.
• Implement Security Controls: Integrate security controls and practices into the software development lifecycle (SDLC) to ensure secure coding practices and reduce the risk of vulnerabilities.
• Collaborate with Developers: Work closely with development teams to provide guidance on secure coding practices, assist in the remediation of identified vulnerabilities, and ensure that security requirements are met throughout the development process.
• Develop Security Tools and Procedures: Create and maintain security tools, scripts, and procedures to support application security efforts and automate security assessments where possible.
• Stay Updated: Keep up with the latest security trends, threats, and best practices to continuously improve application security measures and adapt to emerging threats.
• Documentation and Reporting: Document security assessments, findings, and remediation efforts. Prepare detailed reports and presentations on application security status and issues for management.
• Training and Awareness: Develop and deliver training programs to educate developers and other stakeholders on application security best practices and emerging threats.

Qualifications:

• Proven experience in application security, with a strong understanding of secure coding practices and application vulnerabilities.
• Bachelor’s degree in Computer Science, Information Security, or a related field; advanced certifications or degrees are a plus.
• Expertise in conducting security assessments, including static code analysis, dynamic analysis, and penetration testing.
• Strong knowledge of common application security vulnerabilities (e.g., OWASP Top 10) and experience in using security tools such as SAST, DAST, and IAST.
• Excellent communication skills, with the ability to work effectively with development teams and explain complex security issues to both technical and non-technical stakeholders.
• Experience with programming and scripting languages such as Java, C#, Python, or JavaScript is highly desirable.
• Relevant certifications such as CEH, CISSP, or OWASP-related certifications are highly desirable.

Reporting Line:
The Application Security Engineer will report to the Chief Information Security Officer (CISO), contributing to the organization’s overall application security strategy and initiatives.

Why Join Us?

• Play a crucial role in enhancing the security of our software applications within a globally recognized organization.
• Work in a dynamic and collaborative environment with opportunities for professional growth.
• Competitive salary and comprehensive benefits package.
• Access to continuous professional development and specialized training.

If you are a skilled application security expert with a commitment to protecting software applications and a passion for secure development practices, we want to hear from you!

How to Apply:
Please submit your resume and a cover letter detailing your experience and qualifications for the Application Security Engineer position to Careers@IAISP.org

Join us in our mission to secure our software applications and protect our organization’s digital assets!