Application Security Engineer

Job Description

Requisition Number: 216677External Description:Our TeamThe Application Security team is an integral part of Teradata Global Security and closely partners and guides Product Engineering security. We integrate and support security at every phase of the software development lifecycle (SDLC) and work closely with developers to ensure applications are secure from inception through release. Given Teradata?s large portfolio of analytic applications, we are pushing the boundaries of security by automating source code analysis, and analytic security. Our expertise lies in deep technical understanding of security and our application security engineers within Teradata. The Application Security team is tasked with enabling software developers to build secure application and products through automating security (Shifting Left).Application Security EngineerJob Responsibilities:Serve as the security subject matter expert around Application Security topics, processes, and toolsPartner with Product Engineering to improve security and quality within the software development lifecycle (SDLC)Integrate SAST, SCA, DAST, IaC, and Container scanning into CI/CD pipelinesInterpret SAST, SCA, DAST, IaC, and Container scanning analysis tools results, and penetration test results and describe issues and fixes to non-security expertsTrain developers in various aspects of security to include secure coding, security requirements, SAST, SCA, DAST, IaC, and Container scanning security tools, etc.Manual and automated review of software code to enable software engineers to prioritize remediation of security vulnerabilitiesProvide vulnerability remediation guidance and mentoring to product development software engineersReview, analyze, and evaluate both internally developed software and vendor products and procedures to address security requirementsIdentify and automate security processes and practicesEvaluation of new technologies, tools, and/or development techniques that impact Application SecurityAbility to reason about security decisionsJob Skills:Understand Application Security practices and operationsAbility to communicate effectively with business representatives in explaining security topics clearly and where necessary, in laymans termsGeneral understanding with SAST, SCA, DAST, IaC, and Container analysis toolsAbility to interpret SAST, SCA, DAST, IaC, and Container analysis results, and penetration test results and describe issues and fixes to non-security expertsKnowledge on how to exploit and remediate the OWASP Top Ten (v2021)A deep understanding of web application and API vulnerabilitiesFamiliarity with one or more cloud environments such as AWS, Azure, and/or Google CloudAbility to automate tasks using Python, Bash, or GoAn understanding of one or more programming language such as Java, C, C++, JavaScript, Typescript, SQL, Go, Python, etc.Understand Infrastructure as Code (IaC) languages such as Terraform, CloudFormation, Helm, Ansible, etc.An understanding of HTTP and SSL/TLS protocols, and Web applicationsAn understanding of CI/CD processes and toolsAn understanding of compliance requirements such as PCI-DSS & FedRAMPEducation:Knowledge of core application security principles, common security vulnerability classes, their root causes, and mitigationsMS/BS degree in Electrical Engineering, Computer Science, Information Technology, or related field. Advanced degree highly preferredCountryEEOText_Description:City: HyderabadState: TelanganaCommunity / Marketing Title: Application Security EngineerJob Category: SecurityCompany Profile:Our CompanyTeradata is the connected multi-cloud data platform for enterprise analytics company. Our enterprise analytics solve business challenges from start to scale. Only Teradata gives you the flexibility to handle the massive and mixed data workloads of the future, today.The Teradata Vantage architecture is cloud native, delivered as-a-service, and built on an open ecosystem. These design features make Vantage the ideal platform to optimize price performance in a multi-cloud environment. Remote:Location_formattedLocationLong: Hyderabad, Telangana IN

Keyskills :