Application Security

hace 2 meses

Tijuana, México Solar Turbines A tiempo completo

Career Area:
Business Technologies, Digital and Data

Job Description:
Your Work Shapes the World at Caterpillar Inc.

When you join Caterpillar, you're joining a global team who cares not just about the work we do - but also about each other. We are the makers, problem solvers, and future world builders who are creating stronger, more sustainable communities. We don't just talk about progress and innovation here - we make it happen, with our customers, where we work and live. Together, we are building a better world, so we can all enjoy living in it.

We are seeking an Application Security (Appsec) developer to join our world-class cybersecurity team. This role will work with other cybersecurity professionals as well as IT partners to advocate for and create security solutions for the development of software and other technologies.

Responsibilities:
DAST Scan Review and Triage:

- Conduct in-depth reviews of DAST scan findings to identify and prioritize potential vulnerabilities.
- Manually reproduce and retest vulnerabilities to validate their existence and severity.
- Provide expert consulting to IT partners on remediation strategies and risk mitigation measures.

SAST Scan Review and Triage:

- Conduct in-depth reviews of SAST scan findings, particularly those generated using GitHub CodeQL.
- Analyze source code for vulnerabilities and provide recommendations for remediation.
- Collaborate with development teams to address SAST findings and improve code quality.

Vulnerability Exploitation and Demonstration:

- Ensure compliance with Enterprise Security Policies and Directives, including OWASP Top 10, SANS 25 software flaws, and other vulnerabilities.

DAST Tool Configuration and Support:

- Configure and tune the Enterprise DAST scanning tool to optimize its effectiveness.

Vulnerability Prioritization and Remediation:

- Regularly review DAST scans and prioritize vulnerabilities based on risk and impact.
- Collaborate with IT partners to drive remediation efforts and meet required metrics thresholds.

Technical Education and Awareness:

- Document and report DAST scan findings to business and IT stakeholders.

DAST Program Development and Support:

- Contribute to the development and evolution of the DAST scanning program.
- Provide awareness, education, and guidance on DAST tools and best practices.

Cross-Functional Collaboration:

- Collaborate with Corporate Security partners and other teams to ensure effective security practices.
- Provide backup support for SAST scanning operations and firewall rule requests.

Automation and Tool Development:
Minimum Qualifications:

- Bachelor's degree in Computer Science, Information Technology, or related field or equivalent experience
- 5+ years previous cumulative Information Technology and/or Cybersecurity experience
- 3+ years experience developing software in at least one or more of the following disciplines: JavaScript,.Net Core, C#, CSS, Python, Java, Bootstrap, Git
- 3+ years experience utilizing databases such as SQL or cloud native databases

Preferred Qualifications:

- Familiar with access control systems, network security, or cryptography
- Previous experience with DAST/SAST scanning tools
- Active CISSP Certification or relevant industry certifications
- Previous experience with Risk Management frameworks
- Previous experience with Threat Model Assessments
- Previous experience with Project Management (Waterfall, Agile, etc.)
- Strong analytical and problem-solving skills
- Excellent oral and written communication skills
- Ability to work independently and in a team environment
- Experience in developing software using UX/UI design principles
- Experience in RESTful API design and implementation
- Experience in cloud software development and security

Skill Descriptors

Level Working Knowledge:

- Explains the requirements, deliverables, costs, and criticalities of the assignment.
- Participates in developing consulting opportunities or assignments.
- Uses formal and informal means to keep client informed on progress and issues.
- Carries out the agreed-upon consulting assignment in a professional manner.
- Documents client's objectives and project scope.

Cybersecurity Risk Management: Knowledge of tools, techniques, approaches and processes of cybersecurity risk management; ability to ensure organizational network operation and minimize negative effect by cybersecurity risks.

Level Basic Understanding:

- Explains major methods, tools and processes involved in cyber risk assessment.
- Identifies major categories of cyber risks.
- Describes the goals and objectives of cybersecurity risk management.
- Identifies an organization's resources for cyber risk avoidance and management.

Information Security Technologies: Knowledge of technologies and technology-based solutions dealing with information security issues; ability to protect information security across the organization using encryption technologies and appropriate security software.

  • Application Security Developer

    hace 3 semanas

    Tijuana, Baja California, México Solar Turbines A tiempo completo

    Your Work Shapes the World at Caterpillar Inc. We are seeking a highly skilled Application Security (Appsec) developer to join our world-class cybersecurity team. This role will work with other cybersecurity professionals as well as IT partners to advocate for and create security solutions for the development of software and other technologies....

  • Senior Product Security Specialist

    hace 3 semanas

    Tijuana, Baja California, México Thermo Fisher Scientific A tiempo completo

    At Thermo Fisher Scientific, we are seeking a Senior Product Security Specialist to join our team.Key ResponsibilitiesAs a Senior Product Security Specialist, you will be responsible for promoting secure software development practices, reviewing software security architecture and code, developing and maintaining security tools and automation, and mentoring...

  • Senior Product Security Specialist

    hace 1 mes

    Tijuana, Baja California, México Thermo Fisher Scientific A tiempo completo

    Job SummaryWe are seeking a highly skilled Senior Product Security Engineer to join our team at Thermo Fisher Scientific. As a key member of our Product Security team, you will be responsible for promoting and implementing secure software development lifecycle (SDLC) practices, reviewing software security architecture and code, developing and maintaining...

  • Senior Product Security Engineer

    hace 3 meses

    Tijuana, México Thermo Fisher Scientific A tiempo completo

    Senior Software Security Engineer engages with product development teams across the organization and acts as a domain expert for providing mentorship related to secure software development practices. Key responsibilities As a software security engineer on the Product Security team, you will be responsible for promoting and implementing secure...

  • IT Security Specialist

    hace 4 semanas

    Tijuana, Baja California, México Thermo Fisher Scientific A tiempo completo

    Job Summary:Thermo Fisher Scientific is seeking a highly skilled IT Security Engineer II to join our team. As a key member of our security team, you will be responsible for determining and implementing effective security measures across our network infrastructure.Key Responsibilities:Determine and implement effective security measures across our network...

  • Tijuana Security Officer

    hace 1 mes

    Tijuana, Baja California, México Integer Holdings Corporation A tiempo completo

    Job SummaryInteger Holdings Corporation is seeking a highly skilled Security Officer to join our team in Tijuana. As a Security Officer, you will play a critical role in protecting our assets and ensuring the physical integrity of our employees.Key ResponsibilitiesSupport activities related to protecting company assets and employee safetyEstablish...

  • IT Security Specialist

    hace 1 mes

    Tijuana, Baja California, México Thermo Fisher Scientific A tiempo completo

    Job Summary:We are seeking a highly skilled IT Security Engineer II to join our team at Thermo Fisher Scientific. The successful candidate will be responsible for determining and implementing effective security measures across our network infrastructure.Key Responsibilities:Determine and implement effective security measures across our network...

  • Product Security Engineer II

    hace 1 mes

    Tijuana, Baja California, México Thermo Fisher Scientific A tiempo completo

    As a member of the Thermo Fisher Scientific team, you will be part of a collaborative security engagement group that specializes in software security. The goal of the Software Security team is to provide self-service security and enable the 3 Ways of DevOps: Fast Flow, Rapid Feedback, and Continuous Learning. We strive to integrate and enhance current...

  • Product Security Engineer II

    hace 3 meses

    Tijuana, México Thermo Fisher Scientific A tiempo completo

    As part of the Thermo Fisher Scientific team, you’ll discover meaningful work that makes a positive impact on a global scale. Join our colleagues in bringing our Mission to life every day to enable our customers to make the world healthier, cleaner, and safer. We provide our global teams with the resources needed to achieve individual career goals while...

  • Secure Software Developer

    hace 19 horas

    Tijuana, Baja California, México Thermo Fisher Scientific A tiempo completo

    At Thermo Fisher Scientific, we're looking for a highly skilled and experienced Secure Software Developer to join our Product Security team.We offer competitive remuneration of $140,000 per year, annual incentive plan bonus, healthcare, and a range of employee benefits. Our company culture stands for integrity, intensity, involvement, and innovation.The...

  • Application Solutions Consultant

    hace 3 semanas

    Tijuana, Baja California, México Integer A tiempo completo

    At Integer, our values are the foundation of our culture, unifying and embracing the uniqueness of our team members. We strive for long-term success by focusing on our customers' needs and creating innovative solutions.Accountabilities and Responsibilities:Adhere to Integer's Values, safety, environmental, security, and quality requirements, including...

  • Application Solution Engineer I

    hace 1 mes

    Tijuana, Baja California, México Integer Holdings Corporation A tiempo completo

    At Integer, we foster a culture of unity and innovation, where our values are the foundation of everything we do.Our ValuesWe focus on our customers' success, creating better solutions through collaboration and inclusion.Key ResponsibilitiesAdhere to Integer's Values and safety, environmental, security, and quality requirements.Support Standard Operating...

  • Cybersecurity Expert

    hace 3 días

    Tijuana, Baja California, México Thermo Fisher Scientific A tiempo completo

    Job Description:We are seeking a highly skilled Cybersecurity Expert to join our team as a Network Protection Specialist. This role will be responsible for determining and implementing effective security measures across our network infrastructure.Key Responsibilities:Determine and implement effective security measures to protect our network...

  • Application Solution Eng I, MRQ

    hace 5 meses

    Tijuana, México Integer Holdings Corporation A tiempo completo

    By living according to a common set of values, we create a culture that unifies, embraces the uniqueness we all bring to the company, and positions Integer for long-term success. At Integer, our values are embedded in everything we do. Customer We focus on our customers’ success Innovation We create better solutions Collaboration We create...

  • Lead Cybersecurity Engineer for Secure Software Development

    hace 5 días

    Tijuana, Baja California, México Thermo Fisher Scientific A tiempo completo

    Job SummaryWe are seeking a seasoned Cybersecurity Engineer to lead our efforts in secure software development. This is an exceptional opportunity to join a renowned organization, Thermo Fisher Scientific, and contribute to the creation of cutting-edge solutions that prioritize security.About the RoleThis key position involves promoting and implementing...

  • Staff Software Engineer

    hace 3 semanas

    Tijuana, Baja California, México ThermoFisher Scientific A tiempo completo

    Thermo Fisher Scientific Inc. is seeking a highly skilled DevOps Software Specialist to join our world-class Engineering team. As a global leader in serving science, Thermo Fisher Scientific Inc. is dedicated to enabling our customers to make the world healthier, cleaner, and safer with our innovative technologies and industry-leading...

  • Application Solution Engineer I, Mrq

    hace 5 meses

    Tijuana, México Integer A tiempo completo

    By living according to a common set of values, we create a culture that unifies, embraces the uniqueness we all bring to the company, and positions Integer for long-term success. At Integer, our values are embedded in everything we do. Customer We focus on our customers’ success Innovation We create better solutions Collaboration We create success...

  • Dispatcher/customer Service

    hace 2 meses

    Tijuana, México CA Locksmith and Doors A tiempo completo

    **The CA **team helps clients identify and fix their locksmithing and door issues. Anything to do with security. Our team is dedicated to helping our clients whether developers, small, large businesses, schools or residents — As part of our team, you will play a role in understanding the needs of our clients and help shape the future of home improvement...

  • Security Guard I

    hace 6 meses

    Tijuana, México CommScope A tiempo completo

    In our ‘always on’ world, we believe it’s essential to have a genuine connection with the work you do. En nuestro mundo "siempre activo", creemos que es esencial tener una conexión genuina con el trabajo que realiza. Como nos ayudaras a conectar el mundo Bajo la supervisión directa del jefe directo, el Guardia de Seguridad se enfoca a hacer...

  • Application Developer Lead Consultant

    hace 2 meses

    Tijuana, México Allstate A tiempo completo

    Integon is a part of The Allstate Corporation, which means we have the same innovative drive that keeps us a step ahead of our customers’ evolving needs. It’s how we’ve become industry leaders in property and casualty insurance servicing. We support our insurance company affiliates by offering property and casualty insurance products inclusive of...