Senior Application Security Engineer

Job Summary

Seeking a remote, full-time Senior Application Security Engineer, the position focuses on integrating security within CI/CD pipelines, implementing automated security scanning, and mentoring junior engineers while ensuring compliance with industry standards in the travel sector.

Key responsibilities

• Design, implement, and maintain secure CI/CD pipelines with integrated security testing
• Deploy and support API security tools, ensuring consistent reporting of findings
• Collaborate with development teams to promote secure coding practices and provide security guidance

Required qualifications

• 5+ years of software development experience and 3+ years in application security or DevSecOps
• Strong knowledge of OWASP Top 10 and secure coding practices, particularly in API security
• Expertise with cloud security across major providers (AWS, Azure, GCP) and compliance frameworks
• Experience with CI/CD tools, infrastructure-as-code, and containerization technologies
• Professional security certifications such as CISSP, GIAC, or OSCP are preferred