Application Security Engineer
Skills
Application SecurityEthical HackingForensic AnalysisIncident ResponseInformation SecurityNetwork SecurityOSCP
What the job involves
The main requirements, responsibilities and hiring steps.
Requirements
- Bachelor’s degree in computer science, Information Security, or related field (or equivalent work experience)
- 3-5 years of experience in application security or software development
- Strong understanding of common application vulnerabilities (e.g., OWASP Top 10, SANS CWE Top 25)
- Proficiency in security testing tools (e.g., SonarCloud)
- Experience with secure coding practices in at least one programming language (e.g., Java, Python, C#, JavaScript)
- Familiarity with DevSecOps practices and tools (e.g., Jenkins, Git, Docker)
- Knowledge of web application architectures and cloud security principles (e.g., AWS, Azure)
- Understanding of encryption protocols, authentication mechanisms, and access control models
Nice to have
- CISSP certification
- CEH certification
- OSCP certification
- Experience with container security (e.g., Docker, Kubernetes)
- Experience with cloud security frameworks and tools (e.g., AWS Security Hub, Azure Security Centre)
- Familiarity with microservices architecture and API security
- Hands-on experience with incident response and forensic analysis
Day to day
- Ensure the security of applications throughout the software development lifecycle (SDLC)
- Identify vulnerabilities, design secure applications, and implement security best practices
- Collaborate with cross functional teams to integrate security into application design and development