Application Security Engineer

📋 Description

• Identify high-risk systems and data flows; base work on real risk.
• Decide when a security gate slows a release; explain to engineers and CISO.
• Maintain risk register for app-layer exposures; track open and fixed risks.
• Pinpoint where security decisions are made in delivery; add controls there.
• Run threat modeling for high-stakes changes before design is locked.
• Build a mobile security testing baseline for the team.

🎯 Requirements

• 7+ years in application security with ownership of tech and process.
• Built/improved a secure SDLC in a fast-moving product org; threat modeling.
• Own vulnerability management end-to-end: triage, remediation, SLA, risk acceptance.
• Hands-on mobile security testing (iOS/Android) in production context.
• SAST/DAST/SCA in CI/CD; API security; SBOM and supply chain risk.
• AWS and containers knowledge; Python or Bash automation.