Application Security Engineer @ Alpharetta, GA (Hybrid)

• Job Title: Application Security Engineer
• Work Location: Alpharetta, GA (Hybrid)
• Locals Only with In-person interviews.

Notes: Total IT experience 12+ years

• They are not looking for a DevOps Engineer
• Any title will be fine (Cloud Engineer, AWS Engineer, Cloud Security Engineer, Python Developer, Kubernetes, Docker person but strong with Python) (They are looking for someone who is using Python as a Developer not just a little bit of scripting knowledge)
  * Very Strong with Python
  * Very Strong with Bash
  * Knowledge of Linux will be a plus.
  * 60% Python is required for this role.
  * Someone very solid with data processing, and data analysis, alerting, monitoring, and reporting skills will be a plus.
• * Strong experience with APIs is required.
• * The rest of the things that are mentioned in the job description would be a plus.
• * SAST, DAST, and SCA are not required, it will be a plus
  * Open for any level of experience. (5+ to any)
  * Good Communication Skills
  * Their first priority is Alpharetta, second Virginia, and then New York.
  * 2 rounds of the virtual interview. The first round for 30 minutes, focused on Python.

Required skillset:

• Must have 5+ years software development experience using Python
• Working with APIs, including but not limited to Rest
  o Unit testing frameworks
  o Multi-process and multi-thread architecture
• Must have 5+ years in Linux, strong bash scripting skills.
  Good understanding of SQL to extract relevant information for reporting and analysis
  Working knowledge of windows environment, simple scripting dos-batch etc.
  Bachelor s degree with 10+ years of work experience in the IT field
  Ability to process large datasets for reporting and analysis.
  A self-starter, with a strong desire for learning new technologies and applying them to solve problems
  Knowledge of SAST, OSS technologies
  Ability to perform Python code reviews with minimal assistance
  Expertise in monitoring, alerting, reporting, data analysis is desired.
  Experience with application build environments like Jenkins, TeamCity etc.
  DevOps container/orchestration tools (Kubernetes, Docker, Puppet, etc) is a plus
  Experience with evaluation, integration and onboard of security tools such as DAST, RASP, WAF, vulnerability scanner results, container analyzers, open-source scanning etc is a plus.