Senior Engineer - Application Security

Key Responsibilities

• Integrate security requirements, controls, and testing into the Software Development Life Cycle (SDLC) and DevSecOps pipelines
• Manage and support application security tools, including SAST, DAST, SCA, secret scanning, and container security scanning solutions
• Conduct web application and API security assessments to identify vulnerabilities and potential risks
• Review application architectures and designs, recommending secure design practices and improvements
• Establish secure coding standards, guidelines, and developer security awareness initiatives
• Validate security controls before production releases and support secure application deployments
• Perform vulnerability triage, validate false positives, and track remediation activities
• Monitor emerging application security threats and recommend improvements to security practices
• Collaborate with developers, DevOps engineers, cloud teams, and project stakeholders throughout the SDLC

Person Specifications

• 4+ years of relevant experience in application security, DevSecOps, or software security engineering
• Strong understanding of OWASP standards, secure coding practices, and common application vulnerabilities
• Hands-on experience with SAST, DAST, SCA, secret scanning, and container security tools
• Familiarity with application and API security testing tools such as Burp Suite
• Understanding of CI/CD pipelines, software development processes, and security integration throughout the SDLC
• Ability to assess security risks, analyze vulnerabilities, and provide practical remediation recommendations
• Strong analytical, problem-solving, communication, and collaboration skills
• Relevant application security or cybersecurity certifications are advantageous

Vendor submissions - 12 months