Application Security Engineer
Core
Embed security throughout the digital platform development lifecycle for a national digital transformation project serving a government entity.
Role type
Application Security Engineer
Builds
Secure digital platforms and integrations for a government entity
Domain
Government / Application Security
Required skills
.NET (C#, ABP Framework), React, TypeScript, SAST, SCA, container scanning, secrets detection, threat modeling, OAuth 2.0, OpenID Connect, Keycloak, OWASP Top 10, API security
Preferred skills
Prior .NET development experience, CSSLP, GWAPT, or OSWE certification
Technologies
SonarQube, Trivy, Gitleaks, Keycloak, .NET, ABP, React
Responsibilities
Define security requirements for components and integrations; Facilitate threat modeling for new components; Establish and train teams on secure coding standards; Implement SAST, SCA, container image scanning, and secrets detection in build pipelines; Set security blocking thresholds and triage findings; Conduct manual security reviews of critical areas; Issue security approval outcomes for releases; Review API security, authentication, and authorization; Track vulnerabilities in used components.
Seniority
Mid-level Specialist (4-7 years experience)