Application Security Engineer

As an Application Security Engineer, you will:

• Security Assessments : Perform code reviews, static and dynamic analysis, and penetration testing to identify vulnerabilities in applications.
• Threat Modeling : Collaborate with development teams to analyze application architectures and design threat models.
• Secure SDLC Integration : Integrate security tools and practices into the software development lifecycle to prevent vulnerabilities.
• Vulnerability Management : Identify, prioritize, and help remediate application-level vulnerabilities in coordination with developers.
• Tool Implementation : Deploy and manage application security tools such as SAST, DAST, and dependency scanners.
• Policy Enforcement : Define and enforce application security standards and best practices across all projects.
• Incident Response : Assist in investigating and addressing application-related security incidents.
• Training and Awareness : Conduct secure coding workshops and training sessions for development teams to promote a security-first mindset.

• Application Security Tools : Hands-on experience with tools like OWASP ZAP, Burp Suite, Checkmarx, SonarQube, or Fortify.
• Programming Knowledge : Proficiency in at least one programming language (e. g. , Python, Java, C#, JavaScript) and understanding of secure coding practices.
• Frameworks and Standards : Familiarity with OWASP Top 10, CWE, and secure development frameworks.
• Web and API Security : Strong understanding of common web vulnerabilities (e. g. , XSS, SQL Injection) and API security best practices.
• Container Security : Knowledge of containerization and related security practices (e. g. , Docker, Kubernetes).