Application Security Engineer
Core
Lead the implementation and adoption of secure code-scanning capabilities and automated security testing within a complex software development environment.
Role type
Senior Application Security Engineer (DevSecOps)
Builds
Secure code scanning platforms integrated into CI/CD pipelines
Domain
Software Development / Application Security
Required skills
Secure Code Scanning platforms (Snyk, Fortify, Checkmarx, Veracode), SAST, CI/CD integration, Vulnerability management, DevSecOps practices, Technical standards development, Governance processes
Preferred skills
Mentorship of development teams, Stakeholder engagement
Technologies
Snyk, Fortify, Checkmarx, Veracode, GitHub, GitLab
Responsibilities
Lead implementation of secure code scanning platforms; Integrate security tools with source control and CI/CD pipelines; Establish automated scanning and policy enforcement; Define scanning strategies and remediation workflows; Implement quality gates and vulnerability triage processes; Develop technical standards and operational runbooks; Mentor teams on secure coding practices.
Seniority
Senior, hands-on IC