About the Role
We are looking for a skilled Application Security Engineer to join our Cybersecurity Team. The ideal candidate will be responsible for integrating security throughout the software development lifecycle (SDLC), identifying vulnerabilities in web and mobile applications, conducting security assessments, and working closely with development teams to ensure secure coding practices.
Responsibilities
- Perform application security assessments for web, mobile, and API-based applications.
- Conduct secure code reviews and identify security weaknesses.
- Review authentication, authorization, and session management mechanisms.
- Validate security controls before production deployment.
- Support development teams in implementing secure coding practices.
- Perform vulnerability assessments and remediation verification.
- Assist in security architecture reviews and threat modeling exercises.
- Stay updated on emerging threats and application security trends.
Requirements
- 3+ years of experience in Application Security or Cybersecurity.
- Strong understanding of OWASP Top 10 vulnerabilities.
- Experience with Web Security, Mobile Security, and API Security.
- Knowledge of OAuth2, JWT, SSO, and Identity Management.
- Experience reviewing source code in at least one modern programming language.
- Familiarity with secure SDLC processes.
- Experience with cloud platforms is a plus.
Tools & Technologies
- Burp Suite
- OWASP ZAP
- SonarQube
- Snyk
- Postman
- Git
Preferred Certifications
- CEH
- Security+
- CSSLP (Preferred)