Logo for BAMM Staffing

Sr. Software Engineer (Security Specialist)

BAMM Staffing

Role overview

Qualifications

  • Bachelor's degree in computer science or computer engineering
  • AWS certifications
  • Security certifications
  • Experience with JavaScript, Java, and Python

Responsibilities

  • Set up and operate software security testing techniques
  • Conduct in-depth analysis of open-source threats and vulnerabilities
  • Develop and implement remediation and risk mitigation plans
  • Serve as an Application security consultant and advisor

Key facts

Hard skills

Other skills

  • Communication
  • Analytical Thinking
  • Problem Solving
  • Creativity

About the company

BAMM Staffing logo

BAMM Staffing

Staffing & Recruiting

BAMM is a leading Staffing and Solutions company. We have backgrounds in the industry and have a unique advantage in working with clients and candidates. Founded in 2001 with our headquarters in Eatontown, NJ, BAMM is privately owned and operated. We employ the industry's top recruiters and business development managers with over 20 years combined Staffing and Human Resource experience, specializing in Information Technology providing Direct Hire, Contract, Contract-to-Hire, and Executive Search services. BAMM is industry recognized for meeting and exceeding client expectations and needs. Diversified experience to include industry knowledge of our Financial, Pharmaceutical, Retail, Media, and Manufacturing clients.

Company details

IndustryStaffing & Recruiting
Company size11 - 50

Links

Website LinkedIn See all jobs

Your match analysis

See how your profile stacks up against this role.

We compared the job requirements to your profile to show where you're strong and where you fall short.

Job description

REMOTE: EST HOURS

We are seeking a Sr. Software Engineer to join our progressive information technology Software and Platform Engineering optimization team to help us mature our software security practice. This highly skilled and experienced Application Security Engineer/Specialist will bring hands-on expertise in analyzing risk from vulnerabilities and assessing their impact on custom applications and open-source libraries. The ideal candidate will have a deep understanding of open-source vulnerability remediation, along with practical experience in remediation for Java and JavaScript software. The candidate should also understand risk mitigation techniques to ensure the security of software applications.

Essential Duties and Responsibilities:
  • Set up and operate software security testing techniques in conformity with the technical reference architecture and the companies security policies and guidelines
  • Conduct in-depth analysis of open-source threats and vulnerabilities (including zero-day), collaborate with engineering teams to evaluate and assess the impact of vulnerabilities on current code, including libraries, frameworks, and dependencies.
  • Identify and prioritize high-risk open-source components within our codebase, considering factors such as exploitability, severity, and exposure.
  • Develop and implement remediation and risk mitigation plans to address identified vulnerabilities
  • Coaching and hands on experience for code refactoring, patching, and dependency updates.
  • Identify and recommend engineering design changes to help reduce vulnerabilities.
  • Champion and evangelize secure coding practices with the engineering community.
  • Develop and lead security reviews and drive innovative security remediation efforts.
  • Provide technical designs for innovative software solutions to address security risks.
  • Coaching and assisting in administration and configuring of security tools, documenting secure configurations.
  • Serve as an Application security consultant and advisor for software engineering teams in assisting with secure coding best practices, threat detection, Software security vulnerabilities, security reviews, remediation recommendations throughout the delivery lifecycle.
  • Building relationships and developing partnerships with engineering/development, security operations, enterprise and application architecture teams to mature Security Coding practices for the company owned applications and platforms.
  • Stay informed about emerging threats and vulnerabilities in the open-source community, understanding impact of attacks, controls and mitigation measures in the application security space.
  • Communicate project related security risks, control and remediation measures accurately and in a timely manner to stakeholders and impacted teams.
  • Integrate and adhere with the defined development and delivery process/ Change Management, SLA Compliance, productivity and other enterprise goals.
  • Serve as a thought leader, change agent and influencer within the enterprise providing feedback to leadership, engineering, architecture and security operation team members.

Desired Competencies:
  • Strong spoken and written communication skills
  • Analytical and Problem-solving mindset
  • Developer background with experience in all types of application security testing specific to Software composition Analysis.
  • Good understanding of web application security, static security testing, cloud security, container security - tools, scan, triage, risk evaluation and remediation.
  • Thorough understanding and experience in identifying and mitigating application vulnerabilities publicized by OWASP, WASC, CWE, CVE etc.
  • Strong knowledge on industry best practices, code review and analysis
  • Proficient with source code security review and remediation.
  • Experience working with application development teams, architecture teams, security teams, and infrastructure teams.
  • Has advised and guided teams with secure coding practices and design best practices for security risk recommendation and remediation.
  • Thorough familiarity with different industry standard tools for code repository management, code quality, DevOps, containers, and AWS cloud services.
  • Hands on experience with tools such as Sonatype, Qualys, SonarQube, and AWS Inspector.
  • Proficient with the following languages: JavaScript, Java, and Python
  • Working knowledge of GitHub, AWS ECS/EKS, AWS Lambda, Docker, Terraform.
Essential Soft Skills
  • Interested in learning and applying new technologies and concepts while staying up to date with technology tools and trends in the industry.
  • Possess a positive, can-do attitude and enjoys making a difference in the business through technical contributions
  • Ability to think creatively, stimulate new ideas and challenge existing thinking.
  • Excellent communication skills and ability to articulate technology topics to both technical and non-technical audiences
  • Mortgage Industry Experience would be a plus

Educational Requirements:
  • Position requires a bachelor's degree in computer science or computer engineering with AWS certifications and security certifications and/or equivalent experience.

Apply once. Then go straight to the hiring manager.

After you apply, unlock the direct contact details of the people who actually make the call. A quick follow-up makes you 5x more likely to land an interview.

MR

Marcus Rivera

Chief Revenue Officer

m.rivera@company.com
linkedin.com/in/marcusrivera
Unlocked after you apply
·

Software Engineer Related jobs

WorldwideSoftware Engineer

Other jobs at BAMM Staffing

Premium

Reach out to the hiring manager directly.

Gain access to the contact details of the hiring managers who actually decide, and reach out to network with them directly. That, plus more when you upgrade:

  • Full match report with fit score and gaps
  • Career diagnostics on how recruiters read you
  • Curated company matches and warm intros
  • 48h early access to new roles

Cancel anytime.