Senior Application Security Engineer

We are seeking a highly skilled DevSecOps Engineer with a strong background in application security , penetration testing , and secure development practices . The ideal candidate will bring hands-on experience in SAST , DAST , Kubernetes , CI / CD pipelines , and a solid understanding of DevSecOps principles . You will work closely with engineering, DevOps, and security teams to build, automate, and secure systems across the development lifecycle.

Key Responsibilities :

Conduct backend and infrastructure penetration testing to identify and mitigate security vulnerabilities.

Integrate and manage SAST and DAST tools within CI / CD pipelines.

Collaborate on secure architecture design , threat modeling, and security code reviews.

Drive secure coding practices and security automation across development teams.

Assess and enhance the security of cloud-native applications , containerized workloads, and Kubernetes clusters .

Implement security controls and monitoring for applications and infrastructure.

Contribute to SDL (Secure Development Lifecycle) activities including threat / attack modeling and secure design reviews.

Stay current with emerging threats, vulnerabilities, and regulatory frameworks.

Required Skills and Qualifications :

6+ years of experience in DevSecOps , application security, or related roles.

Proven experience in penetration testing (application and infrastructure).

Prior experience in software development , DevOps , or security architecture .

Expertise in application security and common vulnerability classes (OWASP Top 10).

Experience integrating and using SAST / DAST tools (e.g., Veracode, SonarQube, Burp Suite).

Strong understanding of CI / CD pipelines (Jenkins, GitLab, GitHub Actions, etc.).

Hands-on with Kubernetes , Docker, and container security.

Familiarity with cloud platforms (AWS, Azure, GCP) and securing cloud-native environments.

Deep knowledge of security mechanisms across operating systems, networks, virtualization, and databases.

Familiar with information security frameworks and standards (e.g., NIST, ISO 27001, CIS).

Experience with threat modeling and design reviews .

Excellent problem-solving, collaboration, and communication skills.