Senior Application Security Engineer

We are seeking a highly skilled DevSecOps Engineer with a strong background in application security, penetration testing, and secure development practices. The ideal candidate will bring hands-on experience in SAST, DAST, Kubernetes, CI / CD pipelines, and a solid understanding of DevSecOps principles. You will work closely with engineering, DevOps, and security teams to build, automate, and secure systems across the development lifecycle.

Key Responsibilities :

• Conduct backend and infrastructure penetration testing to identify and mitigate security vulnerabilities.
• Integrate and manage SAST and DAST tools within CI / CD pipelines.
• Collaborate on secure architecture design, threat modeling, and security code reviews.
• Drive secure coding practices and security automation across development teams.
• Assess and enhance the security of cloud-native applications, containerized workloads, and Kubernetes clusters.
• Implement security controls and monitoring for applications and infrastructure.
• Contribute to SDL (Secure Development Lifecycle) activities including threat / attack modeling and secure design reviews.
• Stay current with emerging threats, vulnerabilities, and regulatory frameworks.

Required Skills and Qualifications :