Web Application Security Engineer

Company: Herc Rentals
Location: Bonita Springs
Posted on: January 12, 2020

Job Description:

At Herc Rentals, cyber security is paramount, not an afterthought.-- Come be part of a strong company culture, a cohesive IT organization, and a high performing cyber security team working together to build a top tier security program at Herc. --You will have a huge impact on keeping Herc Rentals secure as a thought leader on securing the lifecycle of Herc's applications and systems.-- You'll hunt down vulnerabilities in Herc's web sites, mobile applications, business applications and infrastructure and manage efforts to remediate them.-- You'll have the resources needed to succeed and you'll help shape the overall cyber security posture for the company.-- Here, you'll make a difference daily and enjoy the journey.Responsibilities:Conduct security assessments, including penetration tests, of Herc's mobile and web applications, cloud environments, and infrastructureDrive our secure SDLC program with development teams to ensure secure code is releasedRespond to cyber incidents as a key member in Herc's Cyber Incident Response TeamPerform static and dynamic code analysis (manual and tool based) for security defectsIdentify and prioritize vulnerabilities based on an understanding of the threat landscape and the asset's risk profileBreak down configuration weaknesses, coding flaws, and other vulnerabilities as needed for Dev and Operations teams to addressImprove upon and automate the vulnerability management lifecycle. Included but not limited to data ingestion & normalization, compliance metrics and detections on ephemeral assetsWork with technical owners to ensure remediation efforts adhere to corporate standards and policiesPerform reoccurring and on demand scanning activities of both corporate and cloud environments utilizing enterprise platformImprove the secure software development lifecycleMentor others within the organizationEducation/Experience Required:BS in Computer Science, Mathematics, Engineering or equivalent experience4+ years' experience in cyber securityPrefer 2+ years web development or software engineering experienceCertifications in one or more of the following: GIAC Web Application Penetration Tester (GWAPT), Certified Incident Handler (GCIH), Certified Ethical Hacker (CEH), Offensive Security Certified Professional (OSCP), Offensive Security Web Expert (OSWE), or Offensive Security Exploitation Expert (OSEE)Skills:Broad and deep knowledge across application security domains.Secure software development lifecycle experience.Web application pen testing experienceExperience required with Qualys (or similar vulnerability management tool)Deep and broad understanding of cyber weaknesses (hardware, software, processes, people) and how attackers exploit themStrong coding skills in one or more languages/frameworks, including PHP, .Net, JSP, Sling, JCR, OSGI, jQuery, JavaScript, XML, C/C++, C#, Java, SQL, assembly, Ruby, Python, and othersAbility to ensure development teams follow industry methodologies and best practices, including OWASP Testing Guide to uncover vulnerabilities across API's and Web ApplicationsExposure to Cloud Computing (AWS & Azure)Understanding of Windows and LinuxExcellent verbal and written communication skillsExcellent organizational and/or project ownership skillsAbility to develop excellent working relationships with a variety of other enabling teamsExcellent attention to detail, data accuracy, and data analysisSelf-motivated and works with a high level of intellectual curiosity and a high degree of integrityCollaborate and communicate effectively with development teams to ensure secure code is released - provided by Dice

Keywords: Herc Rentals, Bonita Springs , Web Application Security Engineer, IT / Software / Systems , Bonita Springs, Florida