Application Security Engineer - AppSec & DevSecOps
Core
Partner with software engineers to embed security across the software development lifecycle, conduct application security reviews, threat modelling, and risk assessments.
Role type
Senior Application Security Engineer (AppSec & DevSecOps)
Builds
Secure software development practices, secure APIs, and optimized security testing processes
Domain
Financial Services / Application Security
Required skills
Application security reviews, threat modelling, vulnerability management, secure coding principles, SAST/DAST tooling, WAF management, API security, DevSecOps practices, Node.js/JavaScript development
Preferred skills
Front-end development exposure, offensive security experience, secure SDLC knowledge, ability to influence engineering teams
Technologies
Node.js, JavaScript, SAST, DAST, WAF
Responsibilities
Partner with software engineers to embed security across the SDLC, conduct application security reviews and threat modelling, identify and remediate vulnerabilities in applications and APIs, support and optimize security testing processes, assist with WAF management, champion security awareness across engineering teams
Seniority
Senior, hands-on IC
