Senior Application Security Engineer
Core
Embed security across the Software Development Lifecycle and strengthen application and cloud security practices.
Role type
Senior hands-on IC application security engineer
Builds
Secure-by-design solutions, CI/CD security controls, reusable security frameworks, automation, and secure cloud/container environments
Domain
Software development, DevSecOps, Cloud security (AWS), Container security
Required skills
Application security testing (SAST, DAST, SCA), CI/CD integration, Threat modelling, Vulnerability remediation, API security, Cloud-native security, Secure coding, Automation scripting, Container security, Software supply chain security
Preferred skills
OSCP, CSSLP, CISSP, Policy-as-code, Service meshes, Security standards compliance
Technologies
Java, C#, Python, JavaScript, GitHub Actions, Jenkins, GitLab CI, AWS, Docker, Kubernetes, MuleSoft, OAuth 2.0, OpenID Connect, SAML, Open Policy Agent, Istio
Responsibilities
Embed secure-by-design and DevSecOps practices throughout the SDLC; Design and implement security controls and automation within CI/CD pipelines; Lead threat modelling, application security reviews, and vulnerability remediation; Identify and assess vulnerabilities using SAST, DAST, SCA, and penetration testing; Build reusable security frameworks, libraries, SDKs, and automation; Strengthen cloud, container, and infrastructure security; Improve API security using OAuth 2.0, OpenID Connect, SAML, and API gateways; Develop automation for vulnerability triage and reporting; Partner with teams to establish secure coding standards; Mentor engineers and deliver security training; Support security incident response and compliance initiatives.
Seniority
Senior, hands-on IC
