Application Security Engineer AppSec

You will secure applications, APIs, and software components throughout the development lifecycle. You will perform automated and manual security testing, conduct threat modeling, document vulnerabilities, support remediation, maintain coding standards, validate fixes before release, track findings, and provide security evidence for audits.

Responsibilities

• Perform SAST, SCA, and DAST application security testing
• Execute manual penetration testing of applications and APIs
• Conduct threat modeling for new applications and significant changes
• Identify, analyze, and document application vulnerabilities and security weaknesses
• Support secure remediation and secure coding practices with development teams
• Define and maintain secure coding standards aligned with OWASP Top 10 and OWASP API Top 10
• Validate remediation of security findings before release
• Maintain vulnerability tracking and reporting
• Provide application security evidence for audits and security assessments

Requirements

• Three or more years of experience in application security, secure software development, or ethical hacking
• Knowledge of secure coding principles and common application vulnerabilities
• Hands-on experience with SAST, DAST, and SCA tools
• Experience performing manual application and API penetration testing
• Familiarity with REST APIs, authentication mechanisms, and authorization models
• Understanding of CI/CD pipelines from a security testing perspective
• Documentation and vulnerability reporting skills