We use technical cookies and visit statistics: Yandex Metrica and Zorky's own de-identified visit log (cookie zk_aid). We never collect form contents, search text or full IP addresses, and never sell data. Opt out with the button below, or with Global Privacy Control or Do Not Track in your browser. More about cookies and statistics.
Zorky CRMZorky CRM
EN|RU
@termdocs
← All jobs

Application Security Engineer

remote175,000 USD · period not specifiedCanada, CAScore 75.5/1002d ago
Market insights
📊 Security: salaries and demand on the market
Show company and link
Free. Sign in with email.
Apply
Upload your CV — we will connect you with the employer directly through our pool.
Send your CV →
Description
Accountabilities - Operate and maintain application security scanning tools, including Static Application Security Testing (SAST), Software Composition Analysis (SCA), secrets scanning, and container scanning, throughout the software development lifecycle. - Review and triage security findings, validate true positives, assess potential risks, and collaborate with engineering teams to prioritize remediation activities. - Track vulnerabilities from identification through resolution, ensuring remediation progress is monitored and service-level agreements (SLAs) are met. - Support the onboarding of new repositories and services into existing security scanning tools and workflows. - Collaborate with developers and other stakeholders to communicate findings clearly, provide actionable remediation guidance, and encourage secure development practices. - Maintain internal documentation, operational runbooks, and procedures while identifying opportunities to improve security processes and workflows. - Assist senior team members with basic scripting, automation, and tool integration tasks to streamline repetitive activities and improve program efficiency. - Requirements 2–4 years of experience in application security, security engineering, software engineering, quality assurance (QA), or a related technical role. - Working knowledge of common application vulnerabilities, particularly the OWASP Top 10, and familiarity with secure software development lifecycle (SSDLC) practices. - Basic
Full description, company and the link to apply — after you sign in. Sign in
Employer contacts (email/phone/telegram) are hidden from the public preview — send your CV, and we will connect you directly.
Urgent question? Message @termdocs