Senior Engineer - Application Security

Start Date: ASAP

Contract Length: 12 Month Contract

Location/Remote Working: Galway - Hybrid - 1 week Onsite, 3 weeks Remote

Pay Rate: 300- 360 Euros Per Day

Summary

Trust in SODA is collaborating with a finance company who are seeking an accomplished Senior Engineer to focus on their application security. As a team member, you will play a pivotal role in steering decisions, leading deployments, and crafting integrations with their current systems.

Essentials

• AWS certification preferred and have working experience with cloud environments.
• Hands on experience with automation & pipeline implementation (Testing, Continuous Integration/Continuous Delivery pipeline).
• Any application security experience, including Pen Testing, Static Composition Analysis (SCA), Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Web Application Firewalls (WAF) would be considered a plus.
• Experience with data processes, including but not limited to ETL, ELT, Data Modeling, and proficiency with BI tools like PowerBi, Tableau, or similar, as well as Oracle or equivalent RDBMS, is also advantageous.

Skills

• You possess strong engineering skills and have experience deploying maintainable, scalable multi-tiered applications.
• You are capable of designing and developing tools/applications using some of the following technologies: Unix and Shell Scripting; Common programming languages such as core Java, Python, etc.; Popular opensource frameworks/libraries (eg Spring, Springboot, Apache Commons, etc.); SOA and API frameworks such as SOAP and REST; Pipeline/Build tools including GIT, Maven, Jenkins, Jenkins Core, and AWS CFT/CDK; Front End languages/frameworks including JavaScript/Typescript, jQuery, Angular, NodeJS, Springboard and React a plus.
• You have experience with test automation, including solid understanding of test tools.
• You have a security architecture mentality.

Key Responsibilities

• Design, develop, test, deploy and maintain SAST, SCA and secret scanning tools into the CI/CD pipeline and developer workflow tools.
• Evaluate and leverage opensource or vendor technologies, to support the development community in eliminating application security vulnerabilities from their applications.
• Continued focus on engineering excellence, including improving automation, test coverage, release velocity and production health.
• You have strong communication skills and technical expertise to drive and participate in meaningful discussions. You are a collaborative team-player in an autonomous team, owning all aspects of delivery (coding, quality, DevSecOps). You build relationships with key business partners and quickly establish trust to ensure effective delivery.
• Support the team in designing reliable, portable, accurate and credible tests, and in integrating them into CI/CD pipelines.
• Participate in development using JavaScript/Angular and Webservices/HTTP