dotNet Developer- Security

A security developer, plays a critical role in designing, developing, and maintaining secure software and applications. The security developer should possess a diverse set of technical skills and knowledge related to both software development and cybersecurity. This role will work closely with HPD development teams to perform security vulnerability assessments, address vulnerabilities, and make recommendations for enhancing security for applications in addition to software development work. This role is critical for maintaining HPD's application security and ensuring robust protections for agency data and applications.






Minimum of 6 years' experience in .Net C# programming, ASP.Net, ADO.Net, JavaScript, HTML and CSS
Minimum of 4 years developing and consuming REST/WCF Services
Minimum of 3 years of programming experience in Angular.
Minimum of 2 years' experience in JQuery, JSON, XML
Minimum of 4 years working with the Oracle, SQL server database environments.
Proficient in using Veracode, HCL AppScan for software security analysis.
Demonstrate understanding of software development life cycle like Agile and Waterfall.
Detailed technical knowledge of techniques, standards and state-of-the art capabilities for authentication and authorization, applied cryptography, security vulnerabilities and remediation
Adequate knowledge of web related technologies (Web applications, Web Services and Service Oriented Architectures) and of network/web related protocols
Software practitioner who integrates security into software during the course of design and development.
Familiar with JIRA, Confluence tools
In-depth technical knowledge of security standards, authentication, authorization, cryptography, vulnerability analysis, and remediation.
Strong understanding of web-related technologies (Web applications, Web Services, SOA) and network/web-related protocols.
Should be skilled at integrating security into software design and development.




Responsibilities:


Software development and implement appropriate security solutions as part of assigned project tasks.
Facilitate risk assessments, penetration tests, and vulnerability assessments and make security enhancement recommendation.
Conduct comprehensive scanning of application layers (UI, API, third-party executables) to identify and address vulnerabilities using tools like Veracode and HCL AppScan.
Research and analyze reported application security vulnerabilities, eliminate false positives, and validate vulnerabilities.
Utilize Software Security Assurance (SSA) tools, such as SD Elements, to support security practices.
Providing recommendations to enhance application and system security.


Sent from my iPhone