Senior Application Security Engineer
Core
Conducting security reviews, code audits, and penetration tests on Fortinet applications to identify and mitigate vulnerabilities.
Role type
Senior IC application security engineer
Builds
Secure application features and infrastructure for Fortinet products
Domain
Cybersecurity, application security, cloud-native architecture
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
manual source code auditing, Java/.NET/Python/JavaScript frameworks, OWASP TOP 10, API security risks, cloud-native architecture, microservices, containerization, application penetration testing, security code review, DAST/SAST/IAST/SCA tools, computer and network security, authentication & authorization, security protocols, applied cryptography, web security standards (CSP, SOP, CORS), CI/CD pipelines, DevSecOps, security architecture patterns, cloud security solutions, threat modeling (MITRE ATT&CK, STRIDE, PASTA), web proxies (Burp, OWASP ZAP, Fiddler), OAuth, JWT
Preferred skills
CSPM/ASPM tools, OSWE/OSCP/GWEB/GPEN certifications, mobile application penetration testing, AI/ML/LLM concepts, AI Red Teaming, AI Guardrails
Technologies
Java, .NET, Python, JavaScript, Burp, OWASP ZAP, Fiddler, MITRE ATT&CK, STRIDE, PASTA, OAuth, JWT, CSP, SOP, CORS
Responsibilities
Perform code reviews, penetration tests, and architectural reviews; develop vulnerability mitigation strategies; handle externally reported vulnerabilities; drive static and dynamic application security testing programs; design and implement security tools and processes; advise development teams on SDLC best practices; research new attack vectors; coach peers in application security concepts
Seniority
Senior, hands-on IC
