Application Security Engineer

We are seeking a skilled Application Security Engineer to help design, implement, and maintain security practices that protect our applications and systems. In this role, you will work closely with development, DevOps, and security teams to identify vulnerabilities, enforce secure coding standards, and integrate security into the software development lifecycle (SDLC).

Key Responsibilities:

• Conduct security assessments, code reviews, and penetration testing on applications

• Identify, analyze, and remediate application vulnerabilities

• Collaborate with developers to implement secure coding practices

• Integrate security tools and processes into CI/CD pipelines

• Perform threat modeling and risk assessments for new and existing applications

• Monitor and respond to security incidents related to application threats

• Stay up to date on emerging security threats, vulnerabilities, and technologies

• Develop and maintain security documentation, policies, and best practices

Required Qualifications:
Bachelor’s degree in Computer Science, Cybersecurity, or related field (or equivalent experience)
Experience in application security, secure coding, or software development
Knowledge of common vulnerabilities (e.g., OWASP Top 10)
Familiarity with programming languages such as Java, Python, JavaScript, or similar
Experience with security testing tools (SAST, DAST, SCA)
Understanding of web technologies, APIs, and cloud environments
Strong problem-solving and analytical skills
Preferred Qualifications:
Experience with DevSecOps practices and CI/CD security integration
Familiarity with cloud platforms (AWS, Azure, GCP)
Security certifications (e.g., CEH, CISSP, OSCP, GWAPT)
Knowledge of container security and microservices architecture
Key Skills:
Secure software development
Vulnerability assessment and remediation
Threat modeling
Communication and collaboration
Attention to detail