Application Security Engineer

What you will do

• Support the integration of security controls and best practices across various phases of the SDLC.
• Assist in security assessments, including static and dynamic code analysis, open-source dependency analysis, and limited penetration testing.
• Participate in manual and automated code reviews to identify potential vulnerabilities and coding flaws.
• Collaborate with software engineers to promote secure development practices, including the use of security testing tools in CI/CD pipelines.
• Contribute to the evaluation, deployment, and tuning of DevSecOps tools such as SAST, DAST, and SCA platforms.
• Help maintain secure deployment workflows and support security automation efforts.
• Participate in cross-functional security reviews of new features and systems with guidance from senior engineers.
• Stay up to date on current security threats, vulnerabilities, and best practices in application security.
• Assist with triaging vulnerabilities from internal scans, bug bounty submissions, or external assessments.
• Document processes and playbooks to support consistent and scalable security practices.
• Provide input to the development of internal security standards and reference architectures.
• Support remediation efforts in collaboration with engineering teams.
• Participate in promoting a security-first culture across the organization.
• Other duties and responsibilities as assigned.

What you will have

• Bachelor’s degree in computer science, cybersecurity, or a related technical field.
• 2+ years of experience in cybersecurity, software engineering, or DevOps, with at least 1+ years focused on application or product security
• Solid understanding of common web application vulnerabilities (e.g., OWASP Top 10, CWE) and remediation strategies.
• Familiarity with DevSecOps tools (SAST, DAST, SCA) and secure SDLC methodologies. - nice to have if they have a solid understanding of common web application vulnerabilities (e.g., OWASP Top 10, CWE).
• Ability to analyze code and spot security issues with guidance.
• Strong communication and collaboration skills.
• Strong attention to detail and willingness to learn new technologies.

Nice to have

• Hands-on experience with CI/CD pipelines (e.g., GitHub Actions, GitLab CI, Jenkins).
• Experience with programming/scripting languages such as Python, JavaScript, or Java.
• Familiarity with security standards and frameworks such as NIST, OWASP SAMM, ISO 27001, or PCI DSS.
• Experience working in a regulated environment (e.g., financial services, healthcare, or government).
• Professional certifications such as Security+, CEH, eJPT, or equivalent (OSCP or similar preferred but not required).
• Exposure to cloud platforms such as AWS, Azure, or GCP.
• Experience contributing to or managing a bug bounty triage process.

Benefits

• Generous time off policies
• Top shelf benefits
• Education, wellness and lifestyle support

To protect candidate information and maintain a secure hiring process, all applications must be submitted through our careers portal. Resumes or CVs sent directly via email will not be reviewed or considered.

#LI-SD1