Application Security Engineer - Expert
Core
Designs and implements security controls to protect applications, APIs, and networks; embeds security into the software development lifecycle.
Role type
Senior IC application security engineer
Builds
Secure application architectures, CI/CD security pipelines, and security policies
Domain
Cybersecurity / Application Security
Required skills
Application security testing, secure SDLC integration, threat modeling, code review, vulnerability assessment, security tooling, incident response, compliance auditing, OWASP/NIST frameworks, scripting
Preferred skills
Cloud security, container security, API security, supply chain security
Technologies
CI/CD pipelines, static analysis tools, dynamic analysis tools, software composition analysis tools
Responsibilities
Oversee implementation and maintenance of security systems and policies; Embed security requirements into SDLC; Conduct application security testing and vulnerability assessments; Partner with dev teams to triage and remediate vulnerabilities; Select and operate security tooling in CI/CD; Provide consultation on security incidents; Optimize security plans and ensure regulatory alignment; Research security trends and educate teams.
Seniority
Senior, hands-on IC
