Senior Application Security Engineer

📋 Description

• Act as the Application Security SME, partnering with Engineering and Product teams to embed
• Lead application security reviews, threat modelling, code reviews and pen testing to identify and
• Design, implement and automate security controls across CI/CD pipelines, including SAST, SCA and
• Drive the technical roadmap of the Application Security program, improving secure development
• Improve and manage application security controls, including WAF, Kubernetes security and
• Mentor Security Champions and junior engineers, promoting a strong security culture across

🎯 Requirements

• 3-4 years of experience in Information Security, including at least 2 years in Application Security.
• Strong experience with Secure SDLC, threat modelling, application security reviews and secure code
• Hands-on experience with SAST, SCA and automated security testing integrated into CI/CD pipelines.
• Strong knowledge of OWASP Top 10, OWASP ASVS, API Security and secure coding best practices.
• Experience implementing and managing WAF solutions, as well as conducting internal penetration
• Solid understanding of Kubernetes security, cloud-native applications and networking fundamentals