SkillBridge, Application Security Engineer - Trainee

Senior Security Engineer

The Senior Security Engineer will be responsible for strengthening and continuously improving the security posture of the applications within Equinix. This role involves integrating security best practices into the application development lifecycle, automating security controls, and implementing infrastructure and configuration-as-code. In addition to a focus on Information Security, this role will work collaboratively with application teams to assess vulnerabilities and guide with secure remediation strategies.

Success for this role requires that you are

• Familiar with application security concepts, standards and trends
• Experienced with implementing and maintaining infrastructure and configuration as a code
• Familiar with DevSecOps principles and security vulnerabilities and is able to explain to developers
• A strong builder mentality with a drive to "see things through"
• Able to interpret and apply security principles and standards to designs, configurations and policies
• Able to communicate technical concepts and details to peers and management clearly and concisely
• Able to demonstrate good judgment concerning the confidentiality, availability, and integrity of information

Responsibilities

• Embed Security controls and tools into CI/CD pipelines (ex: SAST, SCA, DAST, Secrets Scanning)
• Implement Shift-left security practices to ensure vulnerabilities are detected and remediated early in the SDLC lifecycle.
• Work with application teams on secure design principles, threat modeling, and architecture reviews, and guide them with remediation strategies.
• Design, build, document, and maintain efficient, reusable, and reliable code for Security Orchestration, Automation, and Response (SOAR) policy as code, and Security Operations and Analytics platforms
• Lead threat modeling for pipeline architectures and deployment patterns (runner trust, artifact integrity, supply chain).
• Defines secure-by-default pipeline and software development patterns aligned to ASVS L2 and org needs.
• Model the Equinix culture and values

Knowledge / Skills / Abilities

• Strong hands-on experience with CI/CD tools (ideally GitHub Actions)
• Strong working knowledge of how to implement secure systems using public cloud services (any of the major cloud providers)
• Functional understanding of SAST, SCA and DAST concepts
• Experience building automations and services in Terraform, Ansible, Python, etc.
• Assess application security risks and recommend solutions aligned with industry standards (OWASP, NIST, CIS Benchmarks)
• Knowledge of Authentication and Authorization technologies and methods (SAML, HMAC, OAuth etc.)
• Partner with Application teams to remediate vulnerabilities and adopt secure coding practices
• Demonstrated ability to work within globally dispersed and cross-functional teams

Qualifications

• Must meet all eligibility requirements outlined in DOD Instruction 1322.29 and NAVADMIN 222/15. Required
• 8+ years' work experience in Security Engineering or DevSecOps in a medium or large corporate environment; military service/experience or a college degree in computer science, data communications, electrical or computer engineering and 3 years' work experience
• Demonstrated hands on experience with the following technologies (at least couple)
  • SCA (any of Apiiro, Nexus IQ, Snyk, etc)
  • SAST (i.e. SonarQube, Semgrep)
  • API security (Salt, Traceable, NoName)
  • DAST (Invicti, BurpSuite, Traceable)
  • OPSWAT MetaDefender
  • Terraform
• Experience with distributed systems microservices, K8s, etc
• Good time management habits, ability to multitask, and to sustain focus on long tasks.
• Ability to communicate thoughts and technical ideas
• Attitude of taking initiative, enthusiasm, eagerness to learn, teamwork, and creativity.
• The ability to prioritize effectively, balance assigned work and exceptional organization skills required for our constantly evolving environments
• Strong interpersonal and communication skills essential for team-based work assignments
• Presentation skills with colleagues and clients of all levels

Government Careers

Show more