Relevant Experience Required: 3+ years of dedicated experience securing software development lifecycles (SDLC) and engineering DevSecOps pipelines
Mandatory Certification: Certified Application Security Engineer (CASE), Certified DevSecOps Professional (CDP), CSSLP, or CEH
Job Summary
We are seeking an experienced Application Security / DevSecOps Engineer to bake robust safety controls directly into our automated software delivery frameworks. The ideal candidate will bridge software engineering with security operations, implementing automated code testing gates, leading threat modeling workshops, and hardening application containers to identify and mitigate software vulnerabilities before code hits production.
Key Responsibilities
Design and integrate automated security testing gates directly into modern CI/CD pipelines (e.g., , , ).
Triage and remediate software vulnerabilities , analyzing code flaws, open-source dependency risks, and secret exposure incidents alongside software development teams.
Lead comprehensive threat modeling assessments for new applications and architecture features, identifying attack surfaces and defining secure coding frameworks.
Govern application security infrastructure , managing centralized vulnerability aggregation dashboards (e.g., , ) and secret vaults (e.g., , ).
Secure containerized application workloads , auditing Dockerfile construction rules, verifying baseline machine images, and checking Kubernetes network isolation parameters.
Drive application layer incident investigations , analyzing malicious payload web requests, API tampering logs, and cross-site scripting (XSS) vectors to improve software perimeters.
Requirements
4 to 8 years of core software engineering or cloud DevOps experience, with 3+ dedicated years actively designing, building, and deploying application safety frameworks.
Strong technical mastery of automated testing engines (e.g., , , Veracode, ), container security paradigms, and infrastructure-as-code hardening.
Deep structural understanding of the OWASP Top 10 vulnerabilities, API security perimeters, modern secure coding standards, and cryptographic signing protocols.
Mandatory certification: CASE, CDP, CSSLP, or CEH.
Preferred Qualifications
Prior experience with software development in languages like Java, Python, JavaScript/Node.js, or Go .
... security architecture for customer-facing APIs and integrationsApplication Security & Emerging Threats : - Identify and establish controls to mitigate cybersecurity risks- Apply frameworks such as OWASP Top 10- Expand security capabilities into next-generation domains such as AI/ML security, container security, and advanced ...
... listed on Euronext Paris. We are looking for a highly experienced Senior DevSecOps Security Engineer to lead cybersecurity testing initiatives across web applications, APIs, CI/CD pipelines, and software supply chain environments. The ideal candidate will have strong hands-on experience integrating security into the SDLC ...
... collaborative team environment - Dedication to safety through our Zero Harm policy What you will do The primary responsibility for this role is to support pre-sales engineering for Security System global projects as per country specific standards. Basic knowledge about bill of material preparation, cost estimation to come up with ...
... in Application Security - Strong coding ability (Python, JS/TS, backend systems) - Deep understanding of: - OWASP Top 10 - Auth & session management - API security - Injection & sandbox escape vectors - Experience working closely with product/engineering teams What Sets You Apart - You think in systems, not vulnerabilities ...
... accountable for CI/CD platforms, automation frameworks, and security integration across the software development lifecycle. The role partners closely with Software Engineers, Cloud Platform Engineers, Security Engineers, and Architects to enable secure, automated, and resilient solution delivery aligned with DevSecOps best practices. ...
... WAF and fine-tune it according to applications' needs.- Ability to create DevSecOps security requirements while working on a project.- Ability to articulate security requirements during Architecture meetings and work hand in hand with HM Applications and DevOps Principal Engineers. (ref:hirist.tech) [{"name": "full_time", ...
... Application Security to lead our growing AppSec team. This role blends technical expertise with people leadership, driving a secure-by-design culture across our engineering organization while mentoring and empowering a high-performing team. You will oversee the strategy and execution of application security initiatives, embedding ...
... addressed effectively. - Manage and maintain security tools and technologies used for application security testing and monitoring. Configure, deploy, and optimise security tools such as static code analysis (SAST), dynamic application security testing (DAST), and web application firewalls (WAFs) to enhance the security posture ...
... (SCA).- Conduct authenticated security scans using Qualys TotalAppSec, analyze detailed vulnerability reports, prioritize risks, and collaborate directly with engineering teams to guide remediation.- Perform manual and automated application vulnerability analysis and penetration testing using tools such as Burp Suite, OWASP ...
Role Overview :The Web Application Firewall (WAF) Security Engineer is a critical role within our Network Security Team, focusing on protecting internet-facing applications through the implementation and management of WAF solutions. This role is ideal for individuals with strong WAF experience and a proven track record ...