Application Security Engineer
- Practices
- CI/CD
We are looking for a professional with prior experience in software development and application architecture, who has transitioned into application security roles. The ideal candidate should possess the ability to interact with development teams, architecture, operations, and corporate security, while acting simultaneously as a technical consultant, facilitator, and promoter of best practices. The candidate must be capable of understanding code, architecture, and development processes, directly supporting the analysis and resolution of identified vulnerabilities.
Main
The successful candidate will be responsible for: Defining and promoting Secure SDLC practices. Integrating security requirements into the development cycle. Participating in architecture and solution design reviews.
Conducting threat modeling sessions. Supporting teams in implementing authentication, authorization, and data protection mechanisms. Analyzing results from pentests, vulnerability assessments, SAST, DAST, dependency scanning, and container scanning.
Classifying and prioritizing vulnerabilities. Providing technical support for remediation efforts. Overseeing correction plans and associated SLAs.
Defining test scopes and coordinating with external vendors for penetration tests. Validating findings and ensuring follow-up and closure of recommendations. Conducting Secure Coding workshops and promoting OWASP Top 10 and secure development best practices.
Supporting the development of Sec