Who we are […] is a global technology company delivering innovative IT solutions and services. We help organizations transform their businesses through technology, combining technical expertise with a collaborative approach and a strong focus on continuous development.
We are looking for a Professional Application Security Engineer to strengthen our Application Security capabilities. You will work closely with development teams, architects and security professionals to embed security throughout the Software Development Lifecycle.
combines hands-on application security, secure software development, vulnerability assessment and DevSecOps. You will not only identify security risks, but also help engineering teams understand, prioritize and remediate them in a practical and sustainable way. Your responsibilities • Support development teams in integrating security throughout the SDLC and applying secure coding practices.
• Perform and support application security assessments and vulnerability analysis. • Review and prioritize security findings and provide developers with practical remediation guidance. • Work with SAST, DAST and SCA solutions, including Semgrep, SonarQube, HCL AppScan, ZAP, Black Duck, Sonatype Lifecycle or comparable tools.
• Contribute to threat modelling, security design reviews and the implementation of established security patterns. • Integrate and improve application security tools and controls within CI/CD pipelines. • Support