Application Security Engineer

About the role

The Application Security Engineer ensures the security of enterprise applications throughout their lifecycle. You will work closely with development, IT operations, and security teams to assess, remediate, and continuously improve the security posture of both internally built and third‑party software.

Key responsibilities

• Administer, configure, and optimize application security tools such as SAST, DAST, and SCA platforms.
• Monitor security controls, troubleshoot tool issues, and support integration of security solutions in development and production environments.
• Conduct comprehensive security assessments, including vulnerability scans, secure code reviews, and configuration reviews for a variety of applications.
• Analyze, classify, and prioritize vulnerabilities; maintain tracking processes and verify remediation effectiveness.
• Partner with development teams to embed Secure Software Development Lifecycle (SSDLC) practices, provide secure coding guidance, and review architecture for security risks.
• Collaborate with DevOps, cloud, and IT operations teams to resolve security incidents and support investigations.

Required profile

• Strong technical expertise in application security and vulnerability management.
• Hands‑on experience with security testing methodologies and secure software development practices.
• Ability to work cross‑functionally and drive security improvements across diverse technology stacks.

Required skills

• Static Application Security Testing (SAST)
• Dynamic Application Security Testing (DAST)
• Software Composition Analysis (SCA)
• Vulnerability management platforms
• Secure code review techniques
• Secure Software Development Lifecycle (SSDLC) implementation
• Risk analysis and prioritization