Application Security Engineer

Required Skill and Experience

• Threat Modeling such as: (STRIDE, PASTA, Attack trees, tooling, Att&ck) is an added advantage.
• Identifying vulnerabilities using CWE or OWASP.
• Security practices pertaining to: authentication, authorization, logging/monitoring, encryption, infrastructure security, network/segmentation is required.
• Operating systems and their hardening.
• Development concepts (such as: CICD, Pipelines, SDLC).
• Scripting languages, Infrastructure as Code (Terraform, CloudFormation) is a plus.
• Cloud Development Kit (CDK), GitOps.
• Understanding of docker/K8S/serverless/helm.
• Support or perform pen testing.
• Design and review technical architectures.