Application Security Engineer

The Application Security Engineer is responsible for performing complex information technology, and cyber security analysis and control work. The incumbent will maintain the security and integrity of communication infrastructure systems and cybersecurity systems, as defined in Section 117.001(2) of the Texas Business and Commerce Code; and ensure the security of TRS applications by implementing and managing application security measures, working closely with the other Information Security team members, the IT department, application development teams, and business technologists to identify and mitigate security risks, develop and implement security protocols, and provide training and support to development staff.

WHAT WILL YOU DO

Cybersecurity

• •Works with application development teams to develop and implement secure coding practices, including coding standards, code reviews, and security-focused testing.
• •Develops and execute a process for regular application security assessments, including code reviews, threat modeling, and design reviews.
• •Develops and maintain a library of secure coding resources for application developers.
• •Develop and implement application security policies and procedures that align with industry standards and best practices.
• •Provides regular reports to the Information Security Leadership on the status of application security assessments.
• •Work with application development teams to prioritize and remediate identified vulnerabilities.
• •Provide training and support to application developers on secure coding practices.
• •Monitor and enforce compliance with application security policies, procedures, and tooling.
• •Collaborate with the IT department, Information Security team, and application development teams to design and implement security controls and measures, including access controls, encryption, and network segmentation.
• Performs related work as assigned.