Application Security Specialist (40-55K)

Salary: 55000

WAF, OWASP Top 10, Pentest

We are seeking an experienced Application Security Specialist to remediate application-layer security risks for one of our most sizeable industry-leading in-house.


Your new role

• Identify, validate, prioritise, and track security vulnerabilities across the e-commerce platform and other B2C and B2B web services, applying defined risk-based prioritisation criteria.
• Coordinate with application owners, developers, infrastructure teams, and business stakeholders to drive timely and effective remediation of security findings.
• Manage vulnerability reports from regular penetration-testing providers and crowdsourced/bug-bounty programmes, including triage, validation, severity assessment, stakeholder communication, remediation follow-up, and closure verification.
• Provide practical application-security guidance to development teams, including secure coding practices, secure-by-design principles, and remediation recommendations.
• Configure, maintain, tune, and monitor Web Application Firewall (WAF) and website protection controls, balancing strong protection with low false-positive impact.
• Support web application security incident response, including investigation, containment, escalation, remediation coordination, and post-incident review.
  
  

What you'll need to succeed

• 4+ years of experience in IT Security, while 2+ years focused on web application security
• Strong understanding of common web application vulnerabilities and mitigation techniques, including the OWASP Top 10
• Hands-on experience with Web Application Firewalls, including policy configuration, rule tuning, log analysis, and false-positive management.
• Experience handling penetration-test findings and/or bug-bounty submissions, from triage through remediation and validation.
• Knowledge of security testing tools and techniques, such as Burp Suite, DAST/SAST tools, and vulnerability scanners, is an advantage.
• Relevant certifications such as OSCP, GWAPT, CEH, CSSLP, or equivalent are desirable but not essential.
  
  

What you need to do now


If you fulfil all the qualifications mentioned above and have the drive to succeed, click apply below!