Senior Application Security Engineer

Job summary

The role involves ensuring the security of applications and systems within a technology-focused environment. The Senior Application Security Engineer will lead various security initiatives, including threat modeling and secure design reviews, while collaborating with engineering teams across multiple regions.

Qualifications

• Over 5 years of experience in application security, particularly with large-scale systems.
• Strong understanding of secure coding practices and common vulnerabilities (e.g., OWASP Top 10).
• Hands-on experience in secure development across multiple programming languages.
• Proficient in penetration testing, security assessments, and vulnerability management using standard tools (SAST, DAST, SCA).
• Familiarity with cloud security (GCP, AWS, or Azure).
• Knowledge of authentication, authorization, cryptography, and secure architecture.
• Ability to communicate technical concepts clearly to both technical and non-technical stakeholders.

Responsibilities

• Lead threat modeling, secure design reviews, and penetration testing for various products and services.
• Conduct in-depth code reviews and manual testing on high-risk systems, utilizing AI-assisted processes.
• Develop and manage security automation tools for continuous code review and penetration testing.
• Assess and secure AI systems and workflows, identifying specific risks.
• Collaborate with engineering teams to implement security improvements and remediation strategies.
• Investigate application security incidents and perform root cause analysis.
• Contribute to the secure development lifecycle and compliance efforts.

Skills

• Expertise in application security and secure coding practices.
• Proficient in using security assessment tools and methodologies.
• Strong analytical and problem-solving skills.

Education

• Relevant degree or equivalent experience in a related field is preferred.

Tools

• Familiarity with security tools for static and dynamic analysis, as well as manual testing techniques.