Application Security Engineer

Role & responsibilities

The Application Security team ensures the security of products. In this role, you will evaluate products and processes, conduct security assessments and penetration tests, and identify and mitigate security risks throughout the SDLC. You will collaborate closely with developers, product managers, and other members of the security team to ensure robust security practices are integrated into every phase of development

What You'll Be Doing

Initiate and improve processes, security tools, and documentation that will support application security requirements

Identify security gaps in existing and proposed services and products

Conduct penetration testing and code reviews to identify and address potential vulnerabilities and security risks

Work closely with development teams to prioritize and resolve application security issues and implement security best practices, frameworks, etc.

Assist in identifying and responding to security issues in Riskifieds environment

Qualifications

6+ years of application security hands-on experience

Experience conducting penetration testing

Experience performing security reviews, code reviews and customizing application security solutions

Strong understanding of common security attacks and their remediation

Experience with programming languages: Ruby, Scala, Python, JavaScript, etc. (Advantage)

Ability to work well with developers and product management

Experience working in high-scale SaaS environment (Advantage)

Knowledge of microservice architecture, web technologies and APIs (Advantage)

Ability to explain complex security problems

Excellent problem-solving skills