Senior Engineer Application Security

Key Responsibilities

• Integrate security requirements controls and testing into the Software Development Life Cycle (SDLC) and DevSecOps pipelines
• Manage and support application security tools including SAST DAST SCA secret scanning and container security scanning solutions
• Conduct web application and API security assessments to identify vulnerabilities and potential risks
• Review application architectures and designs recommending secure design practices and improvements
• Establish secure coding standards guidelines and developer security awareness initiatives
• Validate security controls before production releases and support secure application deployments
• Perform vulnerability triage validate false positives and track remediation activities
• Monitor emerging application security threats and recommend improvements to security practices
• Collaborate with developers DevOps engineers cloud teams and project stakeholders throughout the SDLC

Person Specifications

• 4 years of relevant experience in application security DevSecOps or software security engineering
• Strong understanding of OWASP standards secure coding practices and common application vulnerabilities
• Hands-on experience with SAST DAST SCA secret scanning and container security tools
• Familiarity with application and API security testing tools such as Burp Suite
• Understanding of CI/CD pipelines software development processes and security integration throughout the SDLC
• Ability to assess security risks analyze vulnerabilities and provide practical remediation recommendations
• Strong analytical problem-solving communication and collaboration skills
• Relevant application security or cybersecurity certifications are advantageous

Vendor submissions - 12 months