Application Security Engineer

WHAT YOU’LL DO:

• Integrate security activities across all SDLC phases.
• Partner with engineering teams to ensure secure development practices.
• Review security controls for new features and architectural changes.

Threat modeling & secure design:

• Run threat modeling sessions.
• Identify threats, attack paths and insecure design patterns.
• Collaborate with engineers to ensure secure-by-design principles.

Security testing & tooling:

• Perform manual and automated web application security testing.
• Operate, tune, and improve AppSec tooling.
• Integrate and automate security checks within CI/CD pipelines.