Information Security Application Tester - Global Cloud Software Company

The Application Tester, IT Security is responsible for integrating security best practices into the development process of Epicor Applications. The Application Tester will work closely with the software development teams to undertake threat modeling, vulnerability scans and applications tests. The results of which will be used to diagnose, document, and remediate application security vulnerabilities. The Application Tester will also be responsible for evaluating, recommending, and implementing application security related software in an automated continuous integration/deployment environment.

Essential Responsibilities:

Work closely with application development and platform teams to help formulate and implement a strategy for software security that is tailored to the specific risks facing the organization, including threat modelling and applications security advisement services.
Develop and maintain a balanced application security program based on a industry recognized application security framework.
Conduct application security assessments/ application security tests and implement tools for dynamic/automated code reviews.
Ensure application design and implementation best-practice with role-based and appropriate access standards.
Ensure compliance with regulatory, and industry standards for application security.
Continuously evaluate the organization's existing application security practices, define and measure security-related activities, and demonstrating improvements to the application assurance program within the organization.
Identify sources to provide secure application development training to developers and provide guidance on the development of web-based training for ongoing awareness.
Develop and maintain unit and integration tests designed to ensure security controls are tested on every build.

Qualifications/Requirements:
BS or BA degree (preferably in a technology related field) or any combination of equivalent education, experience, and formal training that allows the candidate to meet the requirements of the job.
CISSP and/or relevant SANS/GIAC certifications strongly desired but not required.
3-5 years' experience in a software development field such as Software Developer, Architect, Software Quality Assurance, or Application Security Engineer.
Highly proficient in at least one of the following development languages: C#, ASP.NET, Java, or Python
Knowledge of the OWASP Top 10
Strong self-starter who has the ability to operate independently
Has solid understanding and experience with establishing software development policies across an organization
Excellent oral/written presentation skills with ability to communicate effectively with Senior Executive leadership; proficiency in preparation of presentations, analytical reports, and documents regarding program operational status, achievement and performance
Understanding and Passion for Agile/Scrum
Understanding of Continuous Integration/Testing/Delivery
Familiarity with Metasploit, Burp Suite, Fuzzing, Gauntlet, and Jenkins is preferred
Familiarity with code reviews and application security testing preferred
College degree with advanced degree preferred
OSCP, OSCE, or OSWE Certifications are a major plus
In depth knowledge of the IT security industry & best practices.
Broad knowledge of the IT industry as a whole.
Strong organizational and teamwork skills.

In return you can expect a great team environment to work in, along with a competitive salary and benefits.

Competitive salary and benefits

Visit www.epicor.com for more information