Application Security Engineer
Role details
Job location
Tech stack
Job description
We are seeking a motivated Application Security Engineer to help strengthen the security posture of our applications and CI/CD pipelines. You will collaborate with development and DevOps teams to embed security early in the software development lifecycle and support continuous improvement efforts.
Requirements
Do you have experience in Software development?, * 18-24 months of experience in application security, software development, or a related IT security role.
-
Proficiency in Java, JavaScript, and Python, with strong secure coding and vulnerability management skills.
-
Experience with SAST, SCA, DAST, and API Security methodologies.
-
Hands-on experience with tools such as Snyk, Burp Suite, OWASP Dependency Check, or Nexus Lifecycle, including CI/CD integration.
-
Solid understanding of application security principles and secure SDLC practices.
-
Strong knowledge of container technologies (Docker, Podman), including secure image handling, container scanning, and deployment best practices.
Technical Skills (Preferred)
-
Professional experience with CloudBees (Jenkins Enterprise) for CI/CD pipeline design, management, and security tool integration.
-
Experience with GitLab CI/CD and GitLab security features.
-
Experience leveraging Large Language Models (LLMs)-e.g., ChatGPT and Anthropic-for secure code synthesis, automated code review heuristics, and pipeline integrated workflow orchestration.
-
Familiarity with Kubernetes (K8s) for container orchestration.
-
Experience with Red Hat OpenShift (OCP) in enterprise container platform environments.
Soft Skills
- Strong collaboration skills, with the ability to work closely with development and DevOps teams to promote secure coding practices.
- Excellent written and verbal communication skills, suitable for both technical and non technical audiences.
- Proactive and analytical mindset with strong problem solving abilities.
- Ability to take ownership of tasks and operate effectively in a fast paced environment.
- Capability to mentor junior developers on secure development practices.
Skills
- Java, JavaScript and/or Python
- SAST, DAST, SCA and/or API Security
- Synk, BurpSuite, OWASP Dependency-Check and/or Nexus Lifecycle