Application Security Testing Engineer

Position : Application Security Testing Engineer

Experience : 6 - 11 years

Job Description :

We are seeking a highly experienced and technically proficient Application Security Testing Engineer to join our security team. The ideal candidate will be responsible for conducting comprehensive security assessments of our applications, identifying vulnerabilities, and working closely with development teams to ensure the secure delivery of software. This role requires a deep understanding of application security principles, various testing methodologies, and the ability to provide actionable remediation guidance.

Key Responsibilities :

• Lead and execute various types of application security testing, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Interactive Application Security Testing (IAST), and manual penetration testing.
• Identify, analyze, and prioritize security vulnerabilities in web, mobile, and API applications using both automated tools and manual techniques.
• Conduct in-depth analysis of application architecture and design to identify potential security weaknesses and attack vectors.
• Develop and maintain security testing methodologies, processes, and best practices.
• Generate detailed security assessment reports, clearly articulating findings, risks, and recommended remediation steps for technical and non-technical audiences.
• Collaborate closely with development, QA, and DevOps teams to integrate security testing into the SDLC (Secure Software Development Lifecycle) and provide guidance on secure coding practices.
• Validate the effectiveness of implemented security controls and retest vulnerabilities to ensure proper remediation.
• Stay current with the latest application security threats, vulnerabilities, attack techniques, and industry trends.
• Participate in security code reviews and provide expert advice on secure design patterns.
• Contribute to the selection, implementation, and optimization of application security testing tools and platforms.

Requirements :

ref : hirist.tech)