Application Security Engineer

Experience in application security or product security roles
Hands-on experience with offensive security testing (e.g., Burp Suite, Nmap, Kali Linux)
Strong understanding of web and/or mobile security
Experience working with cloud-native applications (preferably AWS).
Solid knowledge of networking and operating systems
Experience with threat modelling and secure design practices
Basic programming knowledge (Python, JavaScript, Go, or similar)
Ability to identify and remediate common vulnerabilities (e.g., SQL injection, XSS)
Experience advising engineering teams on secure coding practices
Basic understanding of cloud environments and infrastructure concepts
Experience working in microservices-based architectures to mandatory

Act as a security advocate for product owners and engineering teams
Perform web, backend, and mobile security assessments
Orchestrate and coordinate security testing activities including penetration testing
Participate in architecture and design discussions to ensure security is embedded from the start
Conduct threat modelling for new and existing features
Support and improve secure development practices across engineering teams
Integrate and enhance security tooling within CI/CD pipelines
Ensure adherence to Secure Development Lifecycle (SDLC) practices
Triaging findings from tools, bug bounty programs, and security reports
Provide guidance on secure coding practices and vulnerability remediation
Balance security requirements with engineering productivity
Collaborate with internal teams and external vendors on security initiatives
Additional responsibilities aligned to project needs:
Manage and reduce security backlog (e.g., reviews, threat models, pentest coordination)
Prevent backlog accumulation by efficiently handling incoming security requests
Correlate findings across multiple security tools and prioritize remediation efforts
Act as a security point of contact for specific product domains
Coordinate with external vendors for security testing and assessments
Provide practical and implementable security recommendations
Quickly onboard and contribute with minimal ramp-up in a fast-paced environment