Role Objective:
The Security Engineer will be responsible for supporting the secure design, development, and deployment of applications by identifying vulnerabilities, performing code and security reviews, and collaborating with engineering teams to embed security throughout the software development lifecycle. They will also contribute to threat modeling, security testing, and the continuous improvement of application security practices and tools.
Key Roles & Responsibilities:
Perform basic application security testing (SAST, DAST) using tools like Burp Suite, SonarQube, or Veracode.
Perform manual and automated code reviews, vulnerability assessments, and penetration testing for web and mobile applications.
Collaborate with developers to identify and remediate security issues during the SDLC (Secure Development Lifecycle).
Analyze findings from SAST, DAST, and SCA tools and guide teams on resolution.
Participate in threat modeling and design review sessions to identify potential security risks.
Assist in maintaining and evolving secure coding guidelines and developer training.
Work with QA and DevOps teams to integrate security tools into CI/CD pipelines.
Stay current on emerging threats, attack techniques, and security trends.
Document technical security findings, track remediation, and contribute to risk assessments.
Support application security awareness efforts across engineering teams.
Required Experience, Education, Knowledge, and Skills:
0–3 years of experience in application security or related fields.
Bachelor’s or master’s degree in cybersecurity, computer science, or a related field.
Basic knowledge of application vulnerabilities and security testing tools.
Familiarity with at least one programming language (e.g., Java, .NET, Python, JavaScript).
Eager to learn and grow in AppSec.
Good communication and teamwork skills.
Detail-oriented with a problem-solving mindset.