Security Engineer (Application Security) Hybrid
Core
Hands-on Security Engineer embedding application security, DevSecOps, and cloud security into software development and operations.
Role type
Mid-level hands-on IC application security engineer
Builds
Security scanning tools, quality gates, security-as-code artefacts, and automation scripts within CI/CD pipelines
Domain
Financial services / Retail / Cloud security
Required skills
CI/CD pipeline configuration, AWS security services, SAST/DAST/SCA/IaC scanning, OWASP Top 10, vulnerability triage, threat modelling, security code reviews, automation scripting
Preferred skills
CNAPP platforms, container security, API security, AI/ML security risks, LLM-based tooling
Technologies
GitLab CI/CD, AWS, Wiz, AWS Inspector, Defender, SAST, DAST, CNAPP
Responsibilities
Implement and maintain security scanning tools in CI/CD pipelines; Tune scanners to reduce false positives; Triage and prioritize vulnerability findings; Review Infrastructure-as-Code for misconfigurations; Participate in threat modelling and security code reviews; Build automation scripts and lightweight tools
Seniority
Mid-level, hands-on IC
