Application Security Engineer (Cyber Security) with Development Role

Position Details

Role:

Job Summary

This is a development-first security role, where approximately 70% of the work involves software development and remediation and 30% focuses on security testing.

The ideal candidate will be responsible for fixing vulnerabilities directly in application code, upgrading vulnerable components, building security automation, and performing security assessments across web applications and APIs.

Key ResponsibilitiesDevelopment & Remediation

• Fix vulnerabilities directly in application code.
• Add test cases to validate security fixes.
• Upgrade vulnerable libraries, frameworks, and third-party components.
• Build security tooling and automation.
• Integrate SAST, DAST, and SCA tools into CI/CD pipelines.
• Harden infrastructure, cloud configurations, containers, Kubernetes, and CI/CD environments.
• Drive remediation activities through to successful deployment.

Security Testing

• Perform application and API security testing.
• Conduct secure code reviews.
• Run vulnerability assessments and prioritize findings.
• Validate remediation efforts and close security findings.

Reporting & Collaboration

• Prepare detailed security findings and remediation reports.
• Work closely with development teams and stakeholders.
• Promote secure coding practices and security awareness.

Mandatory Technical Skills

• Application Security / VAPT
• Secure Code Review
• Vulnerability Remediation
• SAST, DAST & SCA Tools
• CI/CD Security
• Docker & Kubernetes
• REST APIs & Web Security
• OAuth 2.0, OpenID Connect, JWT
• Git, Pull Requests & Code Reviews
• Python / Bash / PowerShell Scripting

Strong development expertise in at least two of the following:

• Java
• C#/.NET
• JavaScript / TypeScript
• Python
• PHP
• Go
• Swift
• Kotlin

Nice to Have

• Burp Suite Professional
• OWASP Top 10 & ASVS
• Semgrep / CodeQL
• Threat Modeling
• Secure Design Reviews
• ISO 27001 / SOC 2 / PCI DSS Compliance Exposure