Application Security Engineer - Penetration Testing

Position Summary :

We are seeking a highly skilled and proactive Application Security Engineer to join our growing security team. You will be responsible for securing our applications throughout the software development lifecycle (SDLC). This includes identifying vulnerabilities, working with development teams to remediate risks, and implementing security best practices and tools to ensure our applications are robust, secure, and compliant with relevant standards.

Key Responsibilities :

• Perform manual and automated security assessments of web, mobile, and cloud applications
• Collaborate with development and engineering teams to embed security into SDLC (DevSecOps)
• Conduct secure code reviews, threat modeling exercises, and risk assessments to identify security weaknesses in application design.
• Implement and manage application security tools (SAST, DAST, SCA, IAST)
• Design and enforce security policies, standards, and procedures for application development
• Monitor, triage, and respond to application-layer vulnerabilities and incidents
• Work closely with QA and engineering teams to drive security testing and fix validation
• Lead the Incident Response effort for application-related security events.
• Stay current on the latest security threats, vulnerabilities, and industrys best practices
• Conduct developer training and promote a security-first culture within engineering
• Cross-train team members on Application Security principles.
• Actively participate in the broader corporate security efforts, including infrastructure security, end-user training, and vulnerability management.

Required Qualifications :

(ref : hirist.tech)