Application Security Engineer
Core
Build secure, resilient, and trusted software by driving product security across the SDLC, performing threat modeling, and integrating security tooling into CI/CD pipelines.
Role type
Application Security Engineer
Builds
Secure software products and platforms
Domain
Application Security / DevSecOps
Required skills
Threat modeling, Architecture reviews, SAST/DAST/SCA tooling, CI/CD integration, Secure coding standards, Authentication/Authorization design, Penetration testing support, Security policy definition
Preferred skills
C#, .NET, JavaScript/TypeScript, Python, Cloud-native security (Azure/AWS), OSCP/CSSLP/OSWE certifications, Agile development
Technologies
SAST, DAST, SCA, CI/CD pipelines, Azure, AWS
Responsibilities
Drive product security across the SDLC, Perform threat modeling and architecture reviews, Integrate security tooling in CI/CD pipelines, Review authentication and authorization designs, Support penetration testing activities, Contribute to security policies and awareness initiatives
Seniority
Mid-Senior, hands-on IC
