Application Security Engineer

Job Description

Role Summary

The Application Security Engineer is responsible for ensuring that all developed or acquired software meets security standards while supporting rapid innovation. The role involves integrating security into the software development lifecycle, conducting security assessments, and providing expert guidance on secure coding, vulnerability management, and penetration testing.

Key Responsibilities

• Integrate security tools, best practices, and standards into the product / software development lifecycle.
• Conduct vulnerability assessments and penetration testing for infrastructure, web applications, APIs, mobile applications, and cloud environments.
• Identify, analyze, and exploit cybersecurity vulnerabilities, demonstrating attack vectors and providing remediation guidance.
• Support incident response and architecture review processes with application security expertise.
• Develop penetration testing plans, methodologies, and documentation, and report findings to stakeholders.
• Manage annual penetration testing activities with external vendors and internal teams.
• Provide manual penetration testing, security gap analysis, and application code review support.
• Evaluate third-party software for security compliance during vendor due diligence.
• Track and report on application security metrics, team performance, and security program effectiveness.
• Contribute to improving application frameworks, perimeter security, and overall security posture.

Requirements

Additional Skills (Preferred)

Requirements

OWASP, SSDLC, CI / CD Pipelines, Pen testing-IaaS, SaaS, PaaS