- Company Name
- Medidata Solutions
- Job Title
- Enterprise Application Security Engineer
- Job Description
-
Job Title: Enterprise Application Security Engineer
Role Summary: Design, evaluate, and enforce application security across the Software Development Life Cycle (SDLC). Collaborate with Engineering, Privacy, DevOps, and other stakeholders to define security standards, conduct architecture reviews, threat modeling, and white‑box testing, and remediate vulnerabilities in diverse applications and platforms.
Expectations:
- Apply SDLC security practices, including static/dynamic analysis, open‑source management, threat modeling, and architecture reviews.
- Manage source code control systems and artifact repositories.
- Communicate effectively with cross‑functional teams to deploy secure, cost‑effective solutions.
Key Responsibilities:
- Perform security architecture reviews and threat modeling for web and service‑oriented applications.
- Execute white‑box security testing and remediate findings in multiple programming languages (.NET, Java, Python, Ruby, JavaScript, TypeScript, AngularJS, ReactJS).
- Integrate security into CI/CD pipelines (Travis, Jenkins, GitHub Actions).
- Manage source code repositories (Git, GitHub, Artifactory) and artifact pipelines.
- Conduct vulnerability assessments using SAST, DAST, and other tools.
- Maintain knowledge of web protocols, infrastructure‑as‑code, Kubernetes, HTTP, HTML, and JavaScript security.
- Collaborate with Infrastructure teams on cloud and on‑prem hosting architectures.
Required Skills:
- SDLC security tools (static/dynamic analysis, threat modeling, code review).
- Source control (Git, GitHub) and artifact management.
- Strong programming fundamentals and familiarity with common coding patterns.
- Web technologies (HTTP, HTML, JavaScript, web services, SOA, OOP).
- Relational and NoSQL databases (MySQL, MS SQL, Oracle, MongoDB, DynamoDB, Redis).
- Cloud platform management (AWS or vendor‑agnostic) and Kubernetes administration.
- Scripting (Python, TypeScript) and CI/CD pipeline integration.
Required Education & Certifications:
- Bachelor’s degree (or higher) in Computer Science, Engineering, Information Technology, or related field.
- Preferred: AWS or other Cloud Management certification, CISSP or equivalent security certification.