The Application Security Engineer ensures the security and integrity of the organization’s software by identifying and mitigating vulnerabilities throughout the development lifecycle. This role works closely with developers, architects, and stakeholders to embed secure design principles into CI/CD pipelines, conduct security assessments, and review code. The engineer leverages SAST/DAST tools, supports Web Application Firewall (WAF) protections, and responds to application security incidents. Additionally, the role promotes security awareness, stays current on emerging threats and technologies, and partners across teams to build strong, scalable, and compliant application security controls.
· Perform application security assessments, penetration testing, and code reviews to identify vulnerabilities.
· Integrate secure design principles and security controls into CI/CD pipelines.
· Implement and manage SAST (Static Application Security Testing) and DAST (Energetic Application Security Testing) tools.
· Support and optimize WAF configurations to protect web applications.
· Guide development teams on secure coding practices and remediation strategies.
· Respond to and investigate application security incidents, ensuring timely resolution.
· Collaborate with architects, developers, and stakeholders to embed security into software design.
· Promote security awareness and provide training to development teams.
· Stay informed on emerging threats, technologies, and best practices in application security.
KPIs and Success Metrics
· Vulnerability Remediation Rate: Percentage of identified vulnerabilities resolved within SLA.
· Secure Development Adoption: Increase in secure coding practices across development teams.
· CI/CD Security Coverage: Number of pipelines integrated with automated security checks.
· Incident Response Time: Average time to detect and remediate application security incidents.
· WAF Effectiveness: Reduction in successful web application atta