Job Seekers, Please send resumes to resumes@hireitpeople.com Short Description: 
Application Scanning Engineer and System Administrator for Enterprise Application Scanning Platform.
Complete Description:
Years of Experience: 5 or more years of experience in the field.
Job Description:Patch and update AppScan Enterprise and SourceReconfigure AppScan as needed, including certificate and/or LDAP changes.Run the user onboarding process for SAST and DAST.Submit new firewall requests as needed.Update Risk Assessment and Enterprise Architecture documents as needed.Remediate vulnerabilities across the AppScan environment.Serves as a Subject Matter Expert (SME) in the field of application security. Works with developers, architects, project leads/managers, business analysts, and others, in identifying security requirements for projects and ensures that these requirements are met as part of the software development lifecycle. Performs security design review, threat modeling and architectural/system security assessments, to ensure that solutions are being designed with a minimal degree of technical risk. The incumbent works to identify, triage, and provide remediation guidance of vulnerabilities within software applications and systems, using a variety of tools, techniques, approaches, and methodologies.Security testing of applications using static testing, dynamic testing, and application penetration testingSecurity assessments, risk analysis, recommend security requirements, participate in code reviews, provide security defect remediation guidance, and serve as a consultant to other business units while acting as an Application Security Subject Matter Expert (SME)Supports the enterprise security architecture and provides technical expertise to troubleshoot and solve problems as needed.SkillRequired / DesiredAmountof Experience3-5 years supporting IBM AppScan EnterpriseRequired3Years3-5 years of experience with Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST)Required3YearsFamiliar with Windows ServerRequired3YearsFamiliar with OWASP Top 10Highly desired3YearsFamiliar with Software Assurance Maturity Model (SAMM)Highly desired3YearsWorking knowledge of LDAP, Active Directory and security groupsRequired3YearsWorking knowledge of cryptography, including encryption and hashingDesired2YearsWorking knowledge of SSL/TLS protocols and certificate-based solutionsRequired3YearsJava and .NET software development experienceNice to have2YearsBasic database programming (SQL, etc) experienceDesired2YearsUnix, Linux, Windows systems engineering experienceDesired2Years