Senior Application Security Engineer

Job Description

Copart is looking for a Senior Information Security Engineer to ensure that our applications, websites, and services are designed to exceed the highest of security standards. As part of our Information Security and Risk Management team, this person will have a passion for DevSecOps, discovering security issues and working with development teams to find vulnerabilities. In addition, you will play a key role in assessing the security of applications, tooling and will establish strong partnerships with development teams across all of Copart.

Requirements

Required Skills:

• Conduct technical security assessments, code audits and architectural design reviews
• Support SDLC and agile environments with application security testing
• Develop automated solutions that mitigate risks throughout the organization
• Advocate for secure coding practices throughout the organization
• Experience with automation through solutions such as Chef, Puppet, Jenkins, and Ansible
• Experience in Java, Python, JavaScript
• Experience with application security tools such as Checkmarx, AppSpider and BurpSuite.
• Strong knowledge of OWASP Top 10 web and the ability to effectively communicate methodologies and techniques with development teams
• Ability to automate DAST/SAST solutions and reporting
• Experience with threat modeling methodologies such as STRIDE

Required Experience:

• BS in Computer Science or equivalent required with minimum of 3 years of experience as a Security Analyst or Engineer
• 2+ years of work experience in application security
• 2+ years with secure code review, technical risk assessments, and/or static code analysis
• 1+ years of Secure coding or automation experience

OSCP certification is a plus

For nearly four decades, Copart has led its industry in innovation and customer service, enabling it to grow profitably in markets across the globe. Our success is the direct result of the skills and efforts of our talented and diverse employees. Our mindset? It's never just a "job" when your coworkers are like family--it's like coming home.