Relevant Experience Required: 3+ years of dedicated experience securing software development lifecycles (SDLC) and engineering DevSecOps pipelines
Mandatory Certification: Certified Application Security Engineer (CASE), Certified DevSecOps Professional (CDP), CSSLP, or CEH
Job Summary
We are seeking an experienced Application Security / DevSecOps Engineer to bake robust safety controls directly into our automated software delivery frameworks. The ideal candidate will bridge software engineering with security operations, implementing automated code testing gates, leading threat modeling workshops, and hardening application containers to identify and mitigate software vulnerabilities before code hits production.
Key Responsibilities
Design and integrate automated security testing gates directly into modern CI/CD pipelines (e.g., , , ).
Triage and remediate software vulnerabilities , analyzing code flaws, open-source dependency risks, and secret exposure incidents alongside software development teams.
Lead comprehensive threat modeling assessments for new applications and architecture features, identifying attack surfaces and defining secure coding frameworks.
Govern application security infrastructure , managing centralized vulnerability aggregation dashboards (e.g., , ) and secret vaults (e.g., , ).
Secure containerized application workloads , auditing Dockerfile construction rules, verifying baseline machine images, and checking Kubernetes network isolation parameters.
Drive application layer incident investigations , analyzing malicious payload web requests, API tampering logs, and cross-site scripting (XSS) vectors to improve software perimeters.
Requirements
4 to 8 years of core software engineering or cloud DevOps experience, with 3+ dedicated years actively designing, building, and deploying application safety frameworks.
Strong technical mastery of automated testing engines (e.g., , , Veracode, ), container security paradigms, and infrastructure-as-code hardening.
Deep structural understanding of the OWASP Top 10 vulnerabilities, API security perimeters, modern secure coding standards, and cryptographic signing protocols.
Mandatory certification: CASE, CDP, CSSLP, or CEH.
Preferred Qualifications
Prior experience with software development in languages like Java, Python, JavaScript/Node.js, or Go .
... project requirements. About the Role We’re looking for Application Security Engineers (AppSec) with strong backend engineering experience and practical cybersecurity knowledge to help evaluate and improve next-generation AI systems. You’ll create realistic, challenging software engineering tasks involving feature implementation, ...
... security architecture for customer-facing APIs and integrationsApplication Security & Emerging Threats : - Identify and establish controls to mitigate cybersecurity risks- Apply frameworks such as OWASP Top 10- Expand security capabilities into next-generation domains such as AI/ML security, container security, and advanced ...
... listed on Euronext Paris. We are looking for a highly experienced Senior DevSecOps Security Engineer to lead cybersecurity testing initiatives across web applications, APIs, CI/CD pipelines, and software supply chain environments. The ideal candidate will have strong hands-on experience integrating security into the SDLC ...
... Francisco and New Hampshire, Bugcrowd is supported by General Catalyst, Rally Ventures, Costanoa Ventures, and others. Visit . Job Summary At Bugcrowd, we handle application security assessment at an epic scale. As an Application Security Engineer (ASE) you will curate and manage the incoming security vulnerability submissions ...
... https://jobeax.com/link/ASqzekG1uKfCw5VF Role & Impact : We are seeking a meticulous and proactive Application Security (AppSec) Engineer to take charge of our security posture across our fintech and logistics platforms. You will work hand-in-hand with our software engineering, DevOps, and product squads to embed security best ...
Planned for Conversion to FTE Task Description: Security Architect / Application Security Engineer We are looking for a hands-on Security Engineer/Architect to embed Security by Design into our applications and work directly with development teams and senior technical stakeholders. Key responsibilities: • Review, validate, ...
... collaboration with design and engineering excellence - Advance in-vehicle infotainment, safety, efficiency, and enjoyment What You'll Be Part Of We are seeking a Security Engineer to join our Global KMS team, contributing to the development and operation of foundational security services across our platform landscape. In this ...
... collaborative team environment - Dedication to safety through our Zero Harm policy What you will do The primary responsibility for this role is to support pre-sales engineering for Security System global projects as per country specific standards. Basic knowledge about bill of material preparation, cost estimation to come up with ...
... at scale. You will help make security an integral part of product development rather than a separate compliance requirement. Accountabilities: As a Staff Application Security Engineer, you will serve as the technical foundation of the application security function, translating security strategy into effective engineering ...
... applications from security threats and vulnerabilities • Security Policy Deployment and fine-tuning • Continuously monitor web application traffic for potential security threats • Analyze and respond to security incidents, providing real-time protection for web applications • Understanding of web application security, OWASP ...