"Alerted.org

**Requisition ID:** 178593

**Job Level:** Mid Level

**Home District/Group:** DHO Information Technology Group

**Department:** Technology Group

**Market:** Corporate Home Office

**Employment Type:** Full Time

Position Overview

The AppSec Engineer will provide technical support and guidance over the Kiewit Information Technology application security program. They will lead the discovery, assessment, remediation, and validation of vulnerabilities related to custom developed applications.

This position works closely with Kiewit application developers, solution architects, and platform administration teams to foster a culture of secure software development. This position is a balance of technical and soft skills to achieve a sustained and proactive reduction in risk.

District Overview

Kiewit Technology Group builds solutions to enable and support our company's expansive operations. Our mission is to deliver project schedule and cost certainty by employing technology designed by and for the construction industry. Our team utilizes systems and tools that manage every part of Kiewit's business and the project lifecycle to improve planning and day-to-day execution in the field. We give our people real-time data to make faster, smarter decisions.

Location

This is a full time, in office role on our LaVista, NE campus. This is not a remote opportunity and requires daily in person attendance.

Responsibilities

+ Meet with development teams regularly to discuss security vulnerabilities in their applications and track remediation efforts.

+ Review, test, and prioritize security findings.

+ Conduct penetration test on internal Kiewit systems/applications as needed.

+ Analyze and develop threat models for Kiewit systems/applications.

+ Proactively research and identify security gaps and work to remediate.

+ Stay up to date with new attack techniques and security tools.

+ Develop and support custom build security tools.

Qualifications

_Technical Skills_

+ 3-5 years’ experience as an application developer (.Net or Python).

+ 2-3 years’ experience as a penetration tester.

+ 2-3 years’ experience with cloud security controls.

+ Proficient with code scanning engines.

+ Have a working knowledge of network technologies and security controls.

_Non-Technical Skills_

+ Strong analytical and problem-solving skills.

+ Excellent written and verbal communication skills.

+ Passion for cybersecurity.

+ Attention to detail and ability to work independently.

+ Ability to work collaboratively in a team environment.

+ Ability to present findings and recommendations to senior leadership

**Preferred Qualifications** :

+ Azure cloud administration or development experience.

+ Checkmarx scanning suite experience.

+ Systems integration experience.

+ Experience developing applications with containers.

Other Requirements:

+ Regular, reliable attendance

+ Work productively and meet deadlines timely

+ Communicate and interact effectively and professionally with supervisors, employees, and others individually or in a team environment.

+ Perform work safely and effectively. Understand and follow oral and written instructions, including warning signs, equipment use, and other policies.

+ Work during normal operating hours to organize and complete work within given deadlines. Work overtime and weekends as required.

+ May work at various different locations and conditions may vary.

We offer our fulltime staff employees a comprehensive benefits package that’s among the best in our industry, including top-tier medical, dental and vision plans covering eligible employees and dependents, voluntary wellness and employee assistance programs, life insurance, disability, retirement plans with matching, and generous paid time off.

Equal Opportunity Employer, including disability and protected veteran status.

​

Company: Kiewit