Secure Coding / Application Security Engineer (ID: 4143)

• Maintain and improve application security by implementing secure coding practices and standards.
• Analyse and investigate security vulnerabilities identified through SAST and SCA tools.
• Work with security tools such as Fortify, Nexus Lifecycle, or similar platforms.
• Help development teams understand security findings and implement appropriate fixes.
• Support developers in identifying, resolving, and preventing code vulnerabilities.
• Maintain and improve secure coding standards, guidelines, and best practices.
• Fine-tune security tool rulesets to reduce false positives and improve detection quality.
• Contribute to internal security tools, including repository scanning solutions.
• Explore emerging security risks, including AI-driven threats and agentic development.
• Collaborate with development teams to continuously improve software security., * Exposure to secure software development practices and modern security tools.
• Opportunities to collaborate with experienced development and security teams.
• Hands-on involvement in improving security standards, processes, and tooling.
• An opportunity to contribute to emerging areas of application security.

• 4-6 years of overall IT experience in software development, secure coding, or application security.
• Hands-on experience in Secure Coding and Application Security.
• Proficiency in at least one programming language.
• Experience with SAST and SCA security tools such as Fortify, Nexus Lifecycle, or similar tools.
• Knowledge of vulnerability analysis, assessment, and prioritisation.
• Understanding of secure software development practices and security standards.
• Exposure to Microsoft Azure, Agile methodologies, and DevOps practices.

You should possess the ability to:

• Analyse security findings and identify their potential impact.
• Guide developers in understanding and resolving application security vulnerabilities.
• Communicate technical security concepts clearly to development teams.
• Improve security scanning configurations and reduce false-positive findings.
• Work collaboratively with multiple development teams in a large corporate environment.
• Adapt to emerging security challenges, including AI-driven attacks.
• Take a proactive, curious, and practical approach to problem-solving.
• Communicate effectively in English.