Application Security Engineer
Application Security Engineer
Posted on :
24-07-2025
Employer Active
1 Vacancy
Job Alert
You will be updated with latest job alerts via emailValid email field required
Send jobs
Share
Send me jobs like this
Job Alert
You will be updated with latest job alerts via emailValid email field required
Send jobs
Job Description
We are seeking an experienced Application Security Engineer to help design build and
maintain secure applications across our development lifecycle. You will work closely with
development DevOps and product teams to identify and mitigate security risks in our systems.
This role requires a proactive and collaborative individual with a strong understanding of secure
coding practices and application architecture.
Key Responsibilities:
- Perform threat modeling security reviews and code reviews for web mobile and
- API-based applications.
- Integrate security best practices into the SDLC including CI/CD pipelines.
- Collaborate with developers to remediate vulnerabilities and improve secure coding
- practices.
- Lead efforts around vulnerability scanning SAST DAST and SCA tools.
- Work with QA and DevOps teams to implement automated security testing.
- Manage and improve the bug bounty program triaging issues reported by external
- researchers.
- Stay up to date with the latest security threats vulnerabilities and technology trends.
- Contribute to security training and awareness initiatives for developers and engineers.
- Define and document security requirements and policies related to applications.
Requirements
- Bachelor in Computer Science Electrical & Engineering or any other related degree.
- 3 years in an application security or related role.
- Strong understanding of OWASP Top 10 CWE/SANS Top 25 and other vulnerability frameworks.
- Experience with secure coding in one or more languages: Python Java JavaScriptGo C# etc.
- Hands-on experience with tools like Burp Suite Zap Fortify Checkmarx SonarQubeetc.
- Familiarity with cloud security (AWS Azure GCP).
- Knowledge of authentication and authorization standards (OAuth2 JWT SAMLetc.).
- Experience with DevSecOps practices and CI/CD pipelines etc.).
- Relevant security certifications (e.g. OSCP CSSLP CEH GWAPT).
- Hands-on experience in penetration testing or red teaming.
- Strong communication skills ability to clearly explain security issues to both technical and non-technical stakeholders.
Employment Type
Full Time
Key Skills
Report This Job
Disclaimer: Drjobpro.com is only a platform that connects job seekers and employers. Applicants are advised to conduct their own independent research into the credentials of the prospective employer.We always make certain that our clients do not endorse any request for money payments, thus we advise against sharing any personal or bank-related information with any third party. If you suspect fraud or malpractice, please contact us via contact us page.
