Application Security Engineer

Responsibilities

• Partner with US teams to provide security guidance as a subject matter expert around application security
• Collaborate with third-party engineers and product owners to identify, prioritize, and remediate vulnerabilities in mobile and web applications
• Review vulnerability findings and work with engineering teams to communicate and remediate security issues
• Maintain application security scan profiles and policies across SAST, DAST, SCA, container security, and IaC
• Integrate security into the software development lifecycle (SDLC), including secure coding practices and automated testing
• Conduct awareness campaigns to promote secure software development practices
• Monitor publicly disclosed vulnerabilities affecting applications and third-party dependencies
• Coordinate with incident response teams to perform root cause analysis on application security incidents

Requirements

• Bachelor's degree and at least four years of experience in cybersecurity, software engineering, or application development
• Experience evaluating application security vulnerabilities for exploitability and business risk
• Familiarity with secure software development lifecycle (SSDLC) practices
• Knowledge of Git-based development workflows and CI/CD pipelines
• Knowledge of application security testing methodologies (SAST, DAST, SCA, secrets detection)
• Knowledge of secure coding principles and OWASP Top 10
• Knowledge of modern authentication technologies (OAuth 2.0, OIDC, SAML, JWT)
• Knowledge of containers and container management (Docker, Kubernetes)
• Knowledge of Infrastructure as Code (Terraform, CloudFormation)

Preferred Qualifications

• Experience developing software in modern programming languages (Java, Python, Go, etc.)
• Experience securing applications within Git-based DevSecOps environments
• Experience integrating application security controls into CI/CD pipelines
• Familiarity with AI-assisted software development tools