Senior Application Security Engineer / Architect

Introduction:

We are seeking a Senior Application Security Engineer / Architect with expertise in Application Security, Secure SDLC, Cloud Security, and DevSecOps. In this role, you will collaborate closely with engineering, product, platform, and architecture teams to enhance secure development practices, offer actionable vulnerability remediation guidance, and promote security awareness within development teams.

Responsibilities:

• Work with cross-functional teams to integrate security best practices into the software development lifecycle.
• Provide expertise in Application Security, including Wiz/CNAPP, Azure Security, SAST/DAST/SCA, OWASP, NIST, and Threat Modeling.
• Translate security findings into clear and actionable remediation guidance for developers.
• Conduct security assessments and penetration testing on applications to identify vulnerabilities.
• Collaborate with stakeholders to design and implement secure architecture solutions.
• Develop and implement security policies, standards, and procedures.
• Stay up-to-date on emerging threats and security technologies to advise on best practices.
• Participate in incident response and security incident investigations.
• Conduct security training and awareness programs for development teams.

Requirements:

Required Skills:

• Proven experience in Application Security.
• Familiarity with Secure SDLC, Cloud Security, and DevSecOps.
• Hands-on experience with Wiz/CNAPP, Azure Security, SAST/DAST/SCA, OWASP, NIST, and Threat Modeling.
• Ability to communicate security concepts effectively to technical and non-technical stakeholders.
• Strong problem-solving and analytical skills.
• Experience in conducting security assessments and penetration testing.
• Knowledge of security standards and frameworks.
• Ability to work independently and as part of a team.
• Excellent written and verbal communication skills.

Preferred Skills:

• Certifications such as CISSP, CISM, or CEH.
• Experience with container security and microservices architecture.
• Knowledge of regulatory compliance requirements (e.g., GDPR, HIPAA).
• Experience in security incident response and digital forensics.
• Previous experience in a leadership or mentoring role.