Sr. Application Security Engineer (35710749)

Job Description

Job Description

We are seeking a highly skilled and experienced Application Security Engineer to join our Application Security team to take charge and advance our application security initiatives, while ensuring the security and integrity of our applications. You will drive security best practices, identify vulnerabilities, and implement solutions to protect our systems and data from evolving threats. This role will require collaboration with development teams, security architects, leadership, and other stakeholders to integrate security best practices into all stages of the software development lifecycle.

The Opportunity

• Your key responsibilities will consist of the following to ensure applications are resilient against emerging threats, reducing potential financial and reputational damage from security incidents.
• Embed security best practices into the software development lifecycle (SDLC).
• Conduct in-depth security assessments, including vulnerability scanning, and code reviews.
• Leverage automated tools and manual testing techniques to identify, risk assess and prioritize and propose mitigation strategies for identified threats and application-level vulnerabilities (e.g., OWASP Top 10, etc.) ensuring our applications meet security standards and reducing exposure to data breaches.
• Collaborate with security architects to design secure application architectures that align with industry best practices.
• Ensure secure coding practices are followed, and security controls are incorporated into software designs.
• Conduct detailed threat modeling to identify attack vectors and potential weaknesses.
• Collaborate with our SDLC Council to develop and maintain secure coding standards, empowering developers to integrate security into the development process.
• Partner with DevOps teams to implement security within CI / CD (continuous integration & delivery) pipelines for automated and seamless deployment of secure code.
• Develop, configure, and maintain tools for static and dynamic application security testing (SAST / DAST).
• Evaluate third-party software and APIs for security compliance
• Assist in incident response activities related to application security breaches, providing rapid identification and mitigation guidance.
• Ensure compliance with security regulations, frameworks, and industry standards such as OWASP.
• Leverage reporting tools to demonstrate the overall risk through metrics (KPIs, KRIs, OKRs) of vulnerabilities and code defects of cyber assets for various team leaders and executive leadership for risk prioritization and enablement of risk-based decision-making.
• Stay up to date with the latest security threats, vulnerabilities, and industry trends to inform and improve security strategies.
• Strong problem-solving abilities and analytical thinking.
• Educate developers and stakeholders on secure coding practices.
• Excellent communication skills to explain security issues to both technical and non-technical stakeholders.
• A team player with the ability to work in a collaborative, fast-paced environment.

The Minimum Qualifications :

The Ideal Qualifications :

Education :

Bachelor’s or master’s degree in computer science