Senior Application Security Engineer

We are seeking a highly skilled DevSecOps Engineer with a strong background in application security , penetration testing , and secure development practices . The ideal candidate will bring hands-on experience in SAST , DAST , Kubernetes , CI / CD pipelines , and a solid understanding of DevSecOps principles . You will work closely with engineering, DevOps, and security teams to build, automate, and secure systems across the development lifecycle.

Key Responsibilities :

• Conduct backend and infrastructure penetration testing to identify and mitigate security vulnerabilities.
• Integrate and manage SAST and DAST tools within CI / CD pipelines.
• Collaborate on secure architecture design , threat modeling, and security code reviews.
• Drive secure coding practices and security automation across development teams.
• Assess and enhance the security of cloud-native applications , containerized workloads, and Kubernetes clusters .
• Implement security controls and monitoring for applications and infrastructure.
• Contribute to SDL (Secure Development Lifecycle) activities including threat / attack modeling and secure design reviews.
• Stay current with emerging threats, vulnerabilities, and regulatory frameworks.

Required Skills and Qualifications :