Application Security Engineer
Core
Protect applications and products by integrating security into all phases of the development and operations lifecycle.
Role type
Application Security Engineer
Builds
Secure software products and services
Domain
Technology / Application Security
Required skills
Secure SDLC, Threat Modeling, Secure Coding, API Security, Authentication & Authorization (OAuth2, OpenID Connect, JWT), Cryptography, CI/CD integration, Vulnerability management, Cloud deployments (AWS, Azure, GCP), Linux, Scripting, Software architecture
Preferred skills
Experience with SAST/DAST tools (SonarQube, Checkmarx, Fortify, Veracode, Snyk, OWASP ZAP, Burp Suite, Trivy), Mentoring
Technologies
Java (Spring Boot), C# (.NET), AWS, Azure, Google Cloud, Linux, SonarQube, Checkmarx, Fortify, Veracode, Snyk, OWASP ZAP, Burp Suite, Trivy
Responsibilities
Define and promote secure development practices, Integrate security requirements into software development lifecycle, Participate in architecture reviews and threat modeling sessions, Analyze and track vulnerabilities from pentests and SAST/DAST scans, Support development teams in vulnerability remediation, Coordinate penetration tests, Promote secure coding through workshops and mentoring, Integrate security controls into CI/CD pipelines, Define metrics to track application security maturity
Seniority
Mid-Senior, hands-on IC
