Application Security Engineer

at M1 Holdings, Inc in Chicago, Illinois, United States

Job Description

• Review and advise on security practices throughout M1 infrastructure and product builds.
• Perform thorough penetration testing and vulnerability assessments on various M1 applications, services, and vendors to identify potential security weaknesses and vulnerabilities. - Conduct source code reviews to identify and analyze vulnerabilities and flaws in M1 applications, services, and vendor-provided software.
• Develop and execute comprehensive test plans, exploit known vulnerabilities, and employ various testing methodologies to simulate real-world attack scenarios.
• Collaborate with cross-functional teams, including developers and system administrators, to provide recommendations and guidance on remediation strategies for identified vulnerabilities.
• Manage and coordinate vendor security reviews, ensuring that all necessary security assessments are conducted and documented.
• Evaluate and triage bug bounty findings, working closely with the development team to provide clear and actionable recommendations for addressing the identified security issues.
• Stay up to date with the latest security vulnerabilities, threats, and industry best practices, and contribute to the development and improvement of security testing methodologies and processes.
• Maintain accurate and detailed documentation of security assessment activities, findings, and remediation efforts.

Telecommuting is permitted.