Application Security Engineer

At The N&D^® Group, we have been covering local homeowners, drivers, and businesses with personalized insurance policies since 1825. As a locally grown insurance company, we know the region, know the risks, and know the right coverage.

Under the supervision of the Manager, Applications Development, the Application Security Engineer will ensure the security of our web applications. The ideal candidate will have experience with a variety of security tools and technologies and will be able to work with our development team to implement security best practices.  

Responsibilities:

• Develop and enforce security best practices for software development


• Perform security audits, risk assessments, and code reviews


• Integrate security measures into the SDLC (Software Development Life Cycle)


• Collaborate with development teams to address security issues and ensure compliance with security standards


• Develop and maintain secure coding guidelines for Java, Oracle, WebLogic, and J2EE technologies.


• Stay updated on the latest security threats and countermeasures


• Ability to internally scan applications, manage vulnerabilities, and remediate security issues


• Work with onshore and offshore team members to conduct security updates to libraries and internal software


• Hands-on development to implement new security features as part of any application development


• Work closely with the infrastructure team to improve the security posture of all systems

Qualifications:

• Bachelor’s degree in Computer Science, Information Security, or a related field.


• 5+ years of IT development experience


• Proficient in Java, J2EE technologies, Oracle databases, and WebLogic


• Minimum of 3 years of experience in application security or a related field


• Strong understanding of web application security principles and how to apply them


• Experience with security testing tools and methodologies


• Excellent problem-solving skills and ability to think like both a developer and a security analyst


• Familiarity with security frameworks such as OWASP, etc.


• Familiarity with various application security tools such as Veracode, SonarQube, DataDog, Quixxi, Rapid7, etc.


• Security certification strongly preferred, including but not limited to CISSP, CISM, CISA

We offer a competitive total compensation package including medical, dental, life insurance, pension and a 401(k) plan with a company match.

The N&D^® Group has adopted a hybrid work model with employees working 3 days in the office and 2 days remote.

Our office headquarters is located in Dedham, MA at a brand-new state of the art facility, recently completed in June 2022.  The N&D® Group continues to invest in the growth of the organization at the regional office in Harrisonburg, VA.

The Norfolk & Dedham Group® is an Equal Opportunity Employer