Sr. Software Engineer / Application Security Specialist
3B Staffing LLC, Orlando, FL, United States
Edit
High-Level Role Summary
Title: Sr. Software Engineer / Application Security Specialist
Core Purpose: Act as a bridge between development and security teams, ensuring secure coding practices and improving the organization's application and cloud security posture.
Focus: Hands-on vulnerability analysis, remediation strategies, and security architecture guidance for Java/JavaScript applications and cloud environments (AWS).
Ideal Candidate Profile
Background: Started as a software engineer (Java preferred), transitioned into application security.
Hybrid Skillset: Strong in secure coding principles + security frameworks + cloud security.
Communication: Able to translate technical security risks into developer-friendly guidance and influence both engineering and security teams.
Leadership: Experience leading small teams (2-3 people) and driving security initiatives.
Tools & Practices:
SonarQube / Sonatype for code vulnerability scanning
Familiar with DevOps/DevSecOps practices
AWS security architecture and certifications
DAST/SaaS tools, running POCs, evaluating vendors
Responsibilities:
Draw flowcharts, architecture diagrams, incident response strategies, and security roadmaps
Evaluate and improve security posture maturity
Work closely with CISO and security team to align development with enterprise security goals
No penetration testing-focus is on code-level security and posture improvement
Bonus: Experience with AI security
Key Deliverables
Implement and manage secure coding practices across development teams
Conduct code vulnerability analysis and remediation (Java/JavaScript focus)
Create roadmaps and dashboards for security posture improvement
Lead POCs for security tools and recommend best-fit solutions
Collaborate with CISO and security leadership on cloud and application security strategy
Interview Focus
Past experience bridging development and security
Hands-on remediation examples and artifacts (flowcharts, architecture diagrams, dashboards)
Case studies on security posture improvement
Knowledge of AWS security, DevSecOps, and vulnerability management tools
High-Level Role Summary
Title: Sr. Software Engineer / Application Security Specialist
Core Purpose: Act as a bridge between development and security teams, ensuring secure coding practices and improving the organization's application and cloud security posture.
Focus: Hands-on vulnerability analysis, remediation strategies, and security architecture guidance for Java/JavaScript applications and cloud environments (AWS).
Ideal Candidate Profile
Background: Started as a software engineer (Java preferred), transitioned into application security.
Hybrid Skillset: Strong in secure coding principles + security frameworks + cloud security.
Communication: Able to translate technical security risks into developer-friendly guidance and influence both engineering and security teams.
Leadership: Experience leading small teams (2-3 people) and driving security initiatives.
Tools & Practices:
SonarQube / Sonatype for code vulnerability scanning
Familiar with DevOps/DevSecOps practices
AWS security architecture and certifications
DAST/SaaS tools, running POCs, evaluating vendors
Responsibilities:
Draw flowcharts, architecture diagrams, incident response strategies, and security roadmaps
Evaluate and improve security posture maturity
Work closely with CISO and security team to align development with enterprise security goals
No penetration testing-focus is on code-level security and posture improvement
Bonus: Experience with AI security
Key Deliverables
Implement and manage secure coding practices across development teams
Conduct code vulnerability analysis and remediation (Java/JavaScript focus)
Create roadmaps and dashboards for security posture improvement
Lead POCs for security tools and recommend best-fit solutions
Collaborate with CISO and security leadership on cloud and application security strategy
Interview Focus
Past experience bridging development and security
Hands-on remediation examples and artifacts (flowcharts, architecture diagrams, dashboards)
Case studies on security posture improvement
Knowledge of AWS security, DevSecOps, and vulnerability management tools