Application Security Engineer, CG-2210-14

Implement FDIC's Application Security strategy and roadmap. Develop, maintain and support the implementation of the FDIC API security strategy. Develop secure coding standards and improves secure software development processes. Conduct application architecture risk analysis and threat modeling against applications and APIs. Support the application security program and collaborate with development teams in secure code reviews and application security testing, utilizing AST, DAST, SCA, IAST and other cybersecurity pen testing tools. Develop custom scripts and solutions to enhance application cybersecurity testing and analysis capabilities. Support the integration of application cybersecurity tools into CI/CD pipeline to automate cybersecurity checks, ensuring API security is a part of automated process. Educate and train the development teams on best practices in application security and API security, and cybersecurity secure coding standards, and secure development methodologies.