IrvingRecruiter
the smart solution for Irving jobs

Application Security Engineer

Company: Allstate
Location: Irving
Posted on: February 14, 2019

Job Description:

Where good people build rewarding careers.

Think that working in the insurance field can't be exciting, rewarding and challenging? Think again. You'll help us reinvent protection and retirement to improve customers' lives. We'll help you make an impact with our training and mentoring offerings. Here, you'll have the opportunity to expand and apply your skills in ways you never thought possible. And you'll have fun doing it. Join a company of individuals with hopes, plans and passions, all using and developing our talents for good, at work and in life.

Job Summary

Allstate Technology & Strategic Ventures (ATSV) team is embarking on a journey to integrate security inside the software development lifecycle. Application Security is tasked to develop a security framework within the Allstate SDLCs, establish a software security assurance process, and work with product delivery teams to build applications securely from start to finish.

The Application Security Engineer will be responsible for integrating security into the development of Allstate s applications. The Application Security Engineer will work closely with the product and software development team to threat model, vulnerability scan, and pen test the early software, system, and network architecture and identify required control points in the application stack. The Application Security Engineer will also work closely with developers to diagnose, document, and remediate application security vulnerabilities. The Application Security Engineer will also be responsible for evaluating, recommending, and implementing application security related software in an automated continuous integration/deployment environment.

Key Responsibilities

  • Work closely with application development and platform teams to help formulate and implement a strategy for software security that is tailored to the specific risks facing the organization, including threat modeling and applications security advisement services.
  • Develop and maintain a balanced application security program based on a well-defined application security framework.
  • Conduct application security assessments / penetration tests and implement tools for dynamic/automated code reviews.
  • Ensure application design and implementation best-practice with role-based and appropriate access standards, as well as integration with Identity and Access Management environments.
  • Ensure compliance with society, regulatory, and industry standards for application security.
  • Continuously evaluate the organization s existing application security practices, define and measure security-related activities, and demonstrating concrete improvements to the application assurance program within the organization.
  • Provide secure application development training to developers and provide guidance on the development of web-based training for ongoing awareness.
  • Conduct code reviews and penetration testing.
  • Develop and maintain unit and integration tests designed to ensure security controls are tested on every build. Job Qualifications

    The ideal candidate would be 50% programmer and 50% hacker. Examples of qualifications that resemble this profile are as follows:
    • 3-5 years experience in a software development field such as Software Developer, Architect, Software Quality Assurance, or Application Security Engineer
    • Highly proficient in at least one of the following development languages: Java, .NET, Node.js, or Python
    • Possess a strong understanding of application architectural patterns, such as MVC, Microservices, Event-driven etc.
    • Creative, organized, responsive, and highly thorough problem solver
    • Possess strong business acumen with ability to work with application development, QA and security teams
    • Possess a restlessness or desire to break into things
    • Knowledge of the OWASP Top 10
    • Strong self-starter who has the ability to operate independently
    • Has solid understanding and experience with establishing software development policies across an organization
    • Excellent oral/written presentation skills with ability to communicate effectively with senior executive leadership; proficiency in preparation of presentations, analytical reports, and documents regarding program operational status, achievement and performance
    • Understanding and Passion for Agile/XP/Scrum/Kanban
    • Understanding of Test Driven Development built on User Stories
    • Understanding of Continuous Integration/Testing/Delivery
    • Familiarity with Metasploit, Burp Suite, Fuzzing, Gaunlt, and Jenkins is preferred
    • Familiarity with code reviews and penetration testing preferred
    • College degree with advanced degree preferred
    • OSCP, OSCE, or OSWE Certifications are a major plus The candidate(s) offered this position will be required to submit to a background investigation, which includes a drug screen.

      Good Work. Good Life. Good Hands(r).

      As a Fortune 100 company and industry leader, we provide a competitive salary - but that's just the beginning. Our Total Rewards package also offers benefits like tuition assistance, medical and dental insurance, as well as a robust pension and 401(k). Plus, you'll have access to a wide variety of programs to help you balance your work and personal life -- including a generous paid time off policy.

      Learn more about life at Allstate. Connect with us on Twitter , Facebook , Instagram and LinkedIn or watch a video .
      Allstate generally does not sponsor individuals for employment-based visas for this position.
      Effective July 1, 2014, under Indiana House Enrolled Act (HEA) 1242, it is against public policy of the State of Indiana and a discriminatory practice for an employer to discriminate against a prospective employee on the basis of status as a veteran by refusing to employ an applicant on the basis that they are a veteran of the armed forces of the United States, a member of the Indiana National Guard or a member of a reserve component.

      For jobs in San Francisco, please click "here" for information regarding the San Francisco Fair Chance Ordinance.
      For jobs in Los Angeles, please click "here" for information regarding the Los Angeles Fair Chance Initiative for Hiring Ordinance.

      It is the policy of Allstate to employ the best qualified individuals available for all jobs without regard to race, color, religion, sex, age, national origin, sexual orientation, gender identity/gender expression, disability, and citizenship status as a veteran with a disability or veteran of the Vietnam Era.

      Department: Information Technology
      - provided by Dice Agile, Architecture, Automated, Developer, Development, HTTP, Java, Jenkins, Lifecycle, Management, Modeling, Programmer, Python, QA, Quality Assurance, Scrum, Security, Testing, Video, Web-based Training

      Keywords: Allstate, Irving , Application Security Engineer, Engineering , Irving, Texas

      Click here to apply!

      Didn't find what you're looking for? Search again!

      I'm looking for
      in category
      within


Other Engineering Jobs


Shop Mechanic
Description: Shop Mechanic Description Quality Carriers, Inc. offers very competitive wages and great employee benefits Total compensation package with Medical, Dental and Vision insurance plans, FSA HSA Options, (more...)
Company: Quality Distribution, Inc.
Location: Midlothian
Posted on: 02/20/2019

Sr Network Engineer II
Description: Would you like to work in a collaborative environment at a state of the art facility in Colorado Then join our Employer team of engineers solving problems that make the world a safer place and help to (more...)
Company: Capital Markets Placement
Location: Richardson
Posted on: 02/20/2019

Entry Level Mechanic
Description: Position Overview The Express Service Technician performs vehicle maintenance as assigned in accordance with dealer and factory standards and builds Customer loyalty by developing trust and ensuring confidence (more...)
Company: AutoNation Ford Burleson - Autonation
Location: Burleson
Posted on: 02/20/2019


QA Automation Engineer
Description: MINIMUM QUALIFICATIONS--- Bachelor's degree in Computer Science or equivalent work experience.--- 4 years of experience
Company: Aptude, Inc.
Location: Coppell
Posted on: 02/20/2019

AUTOMATION ENGINEER
Description: Position - Sr. Automation Engineer Job Description Autonomous Digital Operations platform enables enterprises to reduce cost, downtime, and risk by using Machine Learning to automate and streamline IT (more...)
Company: Y-Axis Inc
Location: Dallas
Posted on: 02/20/2019

Machine Learning Scientist Engineer
Description: Organization Objective/Purpose: br br This role is part of the Machine Learning Consulting/Delivery Team, within the Digital Experience organization. The team's core objective is to drive business (more...)
Company: Epsilon
Location: Plano
Posted on: 02/20/2019

Staff ElectroMechanical Engineer / Electronic Packaging & Hardware Des
Description: Description: Lockheed Martin is seeking a Hardware Electro-Mechanical Packaging Design Engineer for a position in Grand Prairie, TX who will be responsible for the hardware development for missile and (more...)
Company: Lockheed Martin Corporation
Location: Grand Prairie
Posted on: 02/20/2019

ETL Data Engineer
Description: PURPOSE OF JOB br br We are currently seeking talented ETL Data Engineer for our San Antonio, TX or Plano, TX facility. br br Software Developers and Integrators SDIs are engaged in all phases (more...)
Company: USAA
Location: Plano
Posted on: 02/20/2019

Warehouse Design Engineer
Description: Auto req ID: 165133BR Job Description We are PepsiCo Supply Chain. We are the game changers, innovators, collaborators and history makers. The ground breakers of the Supply Chain Logistics space. We (more...)
Company: PepsiCo
Location: Plano
Posted on: 02/20/2019

Cyber Security Engineer
Description: bitsiO is a leading Splunk Professional Services company looking for Beginner to Mid level Security Engineers. Positions available in Chicago, Dallas, San Fransisco, Denver Seattle
Company: bitsIO
Location: Dallas
Posted on: 02/20/2019

Log In or Create An Account

Get the latest Texas jobs by following @recnetTX on Twitter!

Irving RSS job feeds