The Application Security Engineer is responsible for enhancing the security of applications, platforms, and development processes by collaborating with software engineers, DevOps, and cybersecurity teams.
Key duties include:
Conducting security assessments, code reviews, API testing, threat modeling, and penetration testing to identify vulnerabilities.
Defining and enforcing secure coding standards and integrating security tools within CI/CD pipelines.
Supporting secure architecture reviews for cloud-native applications, microservices, and containerized workloads.
Ensuring compliance with cybersecurity frameworks and developing cybersecurity training programs for development teams.
Monitoring threats, responding to security incidents, and staying informed on industry trends and regulatory requirements.
Qualifications:
Bachelor’s in a technical field and 5+ years in information security, with 3+ years in application security or DevSecOps.
Experience with security testing tools, threat modeling, and cloud security, along with strong communication skills.
Preferred certifications include CISSP, CSSLP, OSCP, among others.
Skills: secure coding, vulnerability assessment, cloud security, container security, and cross-team collaboration.
