Application Security Engineer

at  LVT

ABOUT LVT

LVT is on a mission to make the world safer and more secure through rapidly deployable security hardware that runs on our proprietary SaaS platform. Our enterprise-grade safety and security ecosystem makes it easy to secure essentially any physical environment through intelligent automation and actionable insights. As an industry leader in the IoT space, our systems are deployed in every state and adopted by Fortune 500 enterprise companies who share this vision.

POSITION SUMMARY

The Application Security Engineer will play a critical role in ensuring the security of our applications and software development lifecycle. This position will collaborate closely with engineering and product teams to design, create, and manage secure applications. They will develop technical and soft skills to become an expert in application security and use those skills to foster a strong security culture across the organization.

REQUIRED SKILLS & QUALIFICATIONS

• Must be able to work onsite 80% of the time
• 2+ years of experience in an information security role
• 2+ years of security experience with AWS and other cloud service platforms
• Familiarity with common web application languages and frameworks (HTML, javascript, Node.js, React.js, Nest.js, Next.js)
• Solid understanding of common application vulnerabilities
• Solid understanding of secure development tools (SAST, DAST, SCA, etc)
• Solid understanding of IT fundamentals (operating systems, networking, the OSI model)
• Basic understanding of security frameworks such as CIS, NIST, ISO/IEC 27001
• Excellent written and verbal communication skills
• High level of personal integrity

• Assist with the development and maintenance of secure development policies and procedure documentation
• Partner with the product and engineering teams to integrate reproducible security practices into the software development lifecycle
• Develop and implement both manual and automated security processes to identify, evaluate, and mitigate security risks
• Conduct threat models, code reviews, pen testing, and offensive security exercises
• Set up and manage vulnerability scanning tools and manage remediation of identified issues
• Communicate vulnerability details in a manner understood by technical and non-technical business units