Application Security Engineer

Job Summary

A company is looking for an Application Security Engineer to support the security of web applications and APIs.

Key Responsibilities

• Integrate application security best practices into the software development lifecycle (SDLC)
• Identify and prioritize vulnerabilities in web and API-based applications, providing remediation guidance
• Perform manual web application penetration tests and assist with application code reviews

Required Qualifications

• 3+ years of experience in application security, product security, or secure software development
• Experience with manual web application penetration testing and securing modern web applications and APIs
• Strong understanding of web application vulnerabilities and common remediation approaches
• Proficiency in at least one programming language (e.g., Java, Python, JavaScript/TypeScript, C#, or Go)
• Familiarity with security testing tools such as SAST, DAST, and SCA