Senior Application Security Engineer

SDLC:

• Integrate security activities across all SDLC phases: requirements, design, implementation, testing, deployment, and maintenance.
• Partner closely with engineering teams to ensure secure development practices are applied consistently.
• Review security controls for new features, services, and architectural changes.

Threat Modeling:

• Run threat modeling sessions (e.g. STRIDE) for new and existing systems.
• Identify threats, attack paths, misconfigurations, and insecure design patterns.
• Collaborate with engineers to ensure systems follow secure-by-design principles.

Security Testing & Tooling:

• Perform manual and automated web application security testing (e.g. injection flaws, auth issues, access control gaps, insecure configs, logic flaws).
• Operate, tune, and improve AppSec tooling (SAST, DAST, SCA, secrets scanning, dependency scanning).
• Integrate and automate security checks within CI/CD pipelines.