<p>Junior Application Security Engineer</p> <p>Wilmington, DE-Hybrid</p> <p>Monday through Friday 8:00 a.m. to 5:00 p.m.</p> <p>Candidates for this position must be eligible to work in the United States without sponsorship. Time on-site or time zone may be necessary based on business need.</p> <p>Some of the things you will be doing:</p> <ul> <li>Provide expertise in the Application Security areas of Web Application Security Services, API Security and Application Security Testing. </li><li>Develop policies to protect web application and API's from malicious payload attacks, provide virtual patching capabilities and validation with Security Testing. </li><li>Assist in developing an automated security framework for robust deployment tools and processes, leveraging various scripting languages and open-source solutions. </li></ul> <p>What technical skills, qualifications, and experience do you need?</p> <ul> <li>Knowledge in building the F5 WAF, API Security, BOT protection, DOS/DDOS protection policies and extending them to hybrid cloud environment -AWS and Azure environment </li><li>Familiarity with DevSecOps ecosystem: Terraform, Ansible, GitHub, Jenkins, Azure DevOps, SAST, DAST & SCA </li><li>Knowledge of Cloud & Kubernetes Resource Security, Secure Network and Architecture, SDLC standard and policies </li><li>Familiarity with Web App Protection AWS and Azure App Protection Policy, Configuration, and Security Management tools </li><li>Expertise in Programming languages Python, NodeJS, SQL query and Vulnerable Code remediation. </li><li>Stay up to date with the latest application security threats and trends </li><li>Proficiency in designing, implementing, and maintaining effective security policies for web applications using WAF technologies </li><li>Experience coordinating and performing vulnerability assessments using automated and manual tools </li><li>Ability to review and analyze WAF logs to detect and respond to security incidents promptly </li><li>Ability to review and analyze vulnerability data to identify security risks to the organization's network, infrastructure, and application's and determine any reported vulnerabilities that are false positives </li><li>Experience with BI Design and Development </li><li>Familiarity with Information Security frameworks/standards (i.e. CIS, NIST, RFC2196, etc.) </li><li>Familiarity with common security libraries, security controls, and common security flaws </li></ul> <p>#LI-SP1</p>