Application Security Engineer

Responsibilities:

• Design, implement, and maintain application security standards, secure coding requirements, and security controls across the Software Development Lifecycle (SDLC).
• Define and implement application and API security requirements, including secure architecture, authentication, authorization, and data protection controls.
• Establish and operationalize application security best practices, including threat modeling, secure design reviews, and vulnerability management processes.
• Configure, maintain, and optimize application security platforms and tools, including SAST, SCA, DAST, secret scanning, API security, and vulnerability management solutions.
• Translate application security policies, standards, and architectural requirements into scalable security controls, governance processes, automation, and developer-focused security solutions.

Requirements:

• 3+ years of experience in Cybersecurity engineering
• Hands-on experience with application security testing tools such as SAST, SCA, DAST, secret scanning, API security, and vulnerability management platforms.
• Experience with Coverity, Black Duck, SonarQube, and GitHub Advanced Security (GHAS) or similar application security tools.
• Experience defining and implementing application and API security requirements, including authentication, authorization, encryption, data protection, and secure API design.
• Experience working with software development and engineering teams to identify, prioritize, remediate, and track security vulnerabilities.
• Strong understanding of CI/CD, source code management, DevSecOps practices, and automated security testing.
• Strong communication and collaboration skills with developers, architects, DevOps, security, and technology teams.

Education:

• Bachelor s degree in Information Technology, Computer Science, Cybersecurity, Engineering or a related field.