Application Security Engineer

Tasks

• Communicates security risks to engineering and product
• Designs remediation strategies
• Documents application security processes
• Improves secure development lifecycle practices
• Integrates DAST into CI CD pipelines
• Integrates SAST into CI CD pipelines
• Integrates findings into development backlog
• Performs lightweight penetration testing
• Performs secure code reviews
• Performs threat modeling
• Reproduces vulnerability proof of concept
• Reviews code to fix security vulnerabilities
• Supports external penetration testing validation
• Triages bug bounty reports
• Validates security findings

Perks/Benefits

• Health insurance
• International collaboration
• Learning budget
• Paid time off
• Professional development
• Remote work support
• Remote-first work model

Skills/Tech-stack

Agile | Application Firewall | Bug Bounty | Burp Suite | CI/CD | Cross-Site Scripting | DAST | DevOps | Development Lifecycle | Helm | IDOR | OWASP Top | OWASP Top 10 | Penetration Testing | Proof of Concept | SAST | SSRF | Secure Coding | Secure Development | Secure development lifecycle | Security Testing | Snyk | SonarQube | Terraform | Threat modeling | Top 10 | Web Application | Web Application Firewall