Application Security Engineer
Core
Build and enforce application security for cloud-native banking products, protecting against vulnerabilities and ensuring regulatory compliance.
Role type
Senior Application Security Engineer (DevSecOps)
Builds
Production-grade secure web applications and cloud-native banking infrastructure
Domain
Fintech / Cloud Security
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Programming (Python, Go, Java), DevSecOps, Web application penetration testing, Security tooling automation, Distributed systems security, Cloud/Containers (AWS, GCP, Kubernetes, Docker), Threat modeling, Security design reviews
Preferred skills
Professional security certifications (CISSP, OSCP), Security community contributions, Data protection regulations (GDPR, ISO 27001, PCI-DSS)
Technologies
Burp proxy, Web/Network Scanners, Static code analysers, AWS, GCP, Kubernetes, Docker
Responsibilities
Drive strategic security planning and collaborate with dev/infra teams; Produce production web-scale security designs; Perform threat modeling and security design reviews; Conduct vulnerability assessments and security testing; Provide SME on security/privacy across SDLC; Liaise with dev teams for code reviews and education; Contribute to security strategy and tooling selection.
Seniority
Senior, hands-on IC
