- 4-6 years' experience in the application security domain with knowledge and hands on experience in securing applications throughout the software development lifecycle and identifying security weaknesses through threat modelling or secure code review.
- Familiarity with Static Application Security Testing (SAST), Software Composition Analysis (SCA), Container Security, Infrastructure as Code (IaC) Security, API Security, Dynamic Application Security Testing (DAST), and Runtime Application Self-Protection (RASP), particularly GitHub Advanced Security or other related tools.
- Experience in DevSecOps practices and tools, security engineering, infrastructure-as-code, CI/CD, automation, and application development desirable.
- Familiarity with at least one or more programming languages such as Java, Python, Go, or similar.
- Experience or robust interest in agentic engineering tools (e.g., Claude Code, GitHub Copilot), applied with disciplined validation and ownership.