Application Security Engineer

About the role

Join a high‑impact security engineering team focused on protecting large‑scale, cloud‑native applications that power next‑generation AI infrastructure. You will work at the intersection of software engineering and cybersecurity, ensuring security is built into every stage of the development lifecycle.

Key responsibilities

• Identify, analyze, and remediate application security vulnerabilities using modern ASPM tools.
• Build, maintain, and enhance ASPM rules and automation across engineering teams.
• Integrate security best practices into the SDLC in close collaboration with development and platform teams.
• Conduct manual and automated penetration testing to uncover weaknesses.
• Lead threat‑modeling sessions and risk assessments for new and existing applications.
• Develop, maintain, and promote secure coding standards and guidelines.
• Act as a subject‑matter expert, providing guidance to internal teams.
• Stay current with emerging threats, vulnerabilities, and mitigation strategies.

Required profile

• Minimum 4 years of experience in application security, secure software development, or related cybersecurity engineering roles.
• Strong understanding of application security risks, including OWASP Top 10.
• Hands‑on experience with secure coding practices in Python, Go, Java, or JavaScript.
• Proficiency in at least one programming language with willingness to learn additional technologies.

Required skills

• Python
• Go
• Java
• JavaScript
• Burp Suite
• OWASP ZAP
• Semgrep
• Application Security Posture Management (ASPM) tools
• Threat modeling
• Secure coding standards