Application Security Engineer (w/m/d)
Core
Integrating application security into the software development lifecycle by implementing and operating security testing tools and managing remediation of vulnerabilities.
Role type
Application Security Engineer
Builds
Secure software development processes and vulnerability management workflows
Domain
Financial services / Application Security
Required skills
SCA, SAST, DAST tools, CI/CD pipeline automation, vulnerability prioritization, risk assessment, security standards (OWASP, ISO/IEC 27001), reporting and dashboarding
Preferred skills
Software development knowledge, software architecture, modern application operations
Technologies
SCA, SAST, DAST, CI/CD
Responsibilities
Implement, configure, and operate SCA, SAST, and DAST solutions; Define security rules, guidelines, quality gates, and escalation mechanisms; Analyze and evaluate identified vulnerabilities and recommend remediation; Track open findings and ensure agreed-upon measures are followed; Prioritize vulnerabilities based on risk, criticality, and exploitability; Create regular reports and management evaluations on vulnerabilities, risks, and trends; Develop metrics and dashboards for continuous improvement; Ensure adherence to relevant security standards and best practices.
Seniority
Mid-level, hands-on IC
