STAND 8 is a global leader providing end-to-end IT Solutions. We solve business problems through PEOPLE, PROCESS, and TECHNOLOGY and are looking for individuals to help us scale software projects designed to change the world!
Our Application Security Team helps develop, build, and maintain the security of our products and applications. We work closely with the product teams across a family of companies to find creative solutions to improve our security posture. We are looking for an experienced security automation engineer to join the Application Security Strategy Team to help lead and execute various Application Pipeline Security initiatives and build robust automation frameworks.
Responsibilities
Create automated technical validations for the following scenarios:
Ensure that secure pipeline best practices are being followed by developers (encrypt environment variables when possible, proper secrets management, secure deployment, etc.)
Ensure all source code is onboarded and being tested for security vulnerabilities with current company SAST/secret scanning solution.
Ensure that container security agents are deployed to application infrastructure in dev, staging, and production.
Ensure that logging/endpoint security agents are deployed in pipelines. The Logging and Endpoint Leads will work directly with stakeholders on actual deployments and training.
Ensure that applications are protected by WAF (Akamai, Signal Science, AWS WAF, Edg.io)
Ensure that applications are onboarded into our DAST platform.
Ensure that critical applications are added to the Pen Testing queue.
Overall, ensure that all requirements are being followed in our Application Security Standards.
Works as a software developer/engineer on small to mid-sized projects to build software and solutions.
Participate in SDLC process. Troubleshoot and implement custom written and vendor-sourced enterprise software.
Design, develop, test, deploy, document, and support custom develop small to mid-sized software solution.
Develop front-end design, database, technical documentation, test procedures, source control, coding, and system configuration.
Develop UI/UX navigation class API, web services, automation processes, workflow, database objects, and reports.
Work with broader teams on tagging/automations for applications.
Goal driven individual with good technical, interpersonal, communication, and organizational skills.
Embraces and fosters "innovation" by working on new things in new ways every day.
Qualifications
5+ coding, designing, testing, and debugging of software applications.
4+ years of scripting (Python, JavaScript, etc.)
5+ years of cloud experience (AWS)
3+ modern/responsive design programming principles and techniques.
Experience working in Agile or Scrum environments.
Desired Skills
Experience working with the various Business Unit stakeholders who manage code pipelines to ensure they are including our security testing and tools in those pipelines.
Experience working closely with SAST/DAST/Container Security/CSPM platform leads.
Experience documenting and inventorying engineering pipelines, pipeline owners, and communicate our standards and minimum-security requirements to them.
Experience with DevSecOps processes and tools
Experience driving projects with minimal supervision.
Experience with Information Security testing and protection tools, such as SAST, DAST, Container Scanning, Secrets Scanning, CSPM, Endpoint Protection, etc.
Additional Details
The base range for this contract position is $77 - $85/per hour, depending on experience.
Our pay ranges are determined by role, level, and location. The range displayed on each job posting reflects the minimum and maximum target for new hires of this position across all US locations. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training.
Benefits
Medical coverage and Health Savings Account (HSA) through Anthem
Dental/Vision/Various Ancillary coverages through Unum
401(k) retirement savings plan
Company-paid Employee Assistance Program (EAP)
Discount programs through ADP WorkforceNow
About Us
STAND 8 provides end-to-end IT solutions to enterprise partners across the United States and globally with offices in Los Angeles, Atlanta, New York, Mexico, Japan, India, and more. STAND 8 focuses on the "bleeding edge" of technology and leverages automation, process, marketing, and over fifteen years of success and growth to provide a world-class experience for our customers, partners, and employees.
Our mission is to impact the world positively by creating success through PEOPLE, PROCESS, and TECHNOLOGY.
Check out more at www.stand8.io; and reach out today to explore opportunities to grow together!