We are seeking a skilled Application Security Engineer to strengthen the security posture of web and API-based applications. The role focuses on integrating security into the SDLC, managing security tools, identifying vulnerabilities, and working closely with engineering teams to drive timely remediation.
Key ResponsibilitiesApplication Security Engineering
- Provide security engineering support for web and API applications.
- Integrate security controls into the Secure SDLC, including threat modeling and security design reviews.
- Ensure adherence to organizational security standards and best practices.
Vulnerability Scanning & Tool Administration
- Administer and manage vulnerability scanning tools (e.g., Tenable or similar).
- Configure, tune, and maintain scanning policies and schedules.
- Optimize tool performance to improve accuracy and reduce false positives.
SAST & DAST Integration
- Implement and maintain SAST and DAST tools within CI/CD pipelines.
- Configure detection rules and improve result reliability.
- Collaborate with engineering teams to ensure seamless integration and actionable outputs.
Vulnerability Discovery & Risk Prioritization
- Identify and validate vulnerabilities through automated and manual testing.
- Perform false-positive analysis and assess exploitability.
- Provide risk-based prioritization aligned with business impact.
Operational Execution & Remediation
- Review scan results and track vulnerabilities to closure.
- Coordinate with development teams for timely remediation.
- Ensure adherence to defined workflows and SLAs.
Red Team & Offensive Security Techniques
- Validate vulnerabilities using manual testing and offensive security methods.
- Develop proof-of-concept exploits where required.
- Document attack paths, reproduction steps, and impact clearly.