Application Security Engineer
Core
Conduct security assessments, vulnerability testing, and remediation for web applications to protect company and customer-facing systems.
Role type
Mid-level IC application security engineer
Builds
Secure web applications and vulnerability management processes
Domain
Cybersecurity / Web Application Security
Required skills
web application security concepts, OWASP Top 10, vulnerability assessment, penetration testing, HTTP/HTTPS, web architecture, authentication, session management, APIs, secure coding principles, vulnerability remediation, validation techniques, security testing tools (Burp Suite, OWASP ZAP, WebInspect), operating systems, networking, infrastructure security
Preferred skills
secure software development lifecycle integration, web application asset management, developer training, vulnerability management processes, Security+, CEH, OSCP certifications
Technologies
Burp Suite, OWASP ZAP, WebInspect, HTTP, HTTPS, APIs
Responsibilities
Conduct periodic security assessments and vulnerability testing of web applications; Assess newly developed or deployed web applications before production release; Identify, analyze, and document vulnerabilities and recommend remediation; Track vulnerabilities through remediation and perform follow-up validation; Provide developers with security guidance and technical support; Create and deliver developer training on secure coding practices; Investigate reported security concerns and support analysis and remediation; Prepare and maintain vulnerability assessment reports and documentation; Collaborate with development, infrastructure, and security teams
Seniority
Mid-level, hands-on IC
