Senior Application Security Engineer

The Senior Application Security Engineer will be responsible for leading the application security initiatives within our organization. This role involves designing, implementing, and maintaining security protocols and practices to protect the company's applications from threats and vulnerabilities. The ideal candidate will have a deep understanding of application security best practices, experience in leading security teams, and the ability to work closely with development teams to ensure security is integrated into the software development lifecycle (SDLC).

Key Responsibilities:

• Leadership & Strategy:

  • Lead and mentor a team of application security engineers, fostering a culture of security awareness and continuous improvement.
  • Develop and implement a comprehensive application security strategy aligned with the organization’s overall security objectives.
  • Collaborate with senior management to align security initiatives with business goals.

• Security Architecture & Design:

  • Design and implement security architecture and frameworks for web, mobile, and cloud applications.
  • Conduct security reviews and threat modeling to identify potential security issues during the design phase.
  • Establish security guidelines and standards for the development teams to follow.

• Security Assessments & Vulnerability Management:

  • Lead the execution of application security assessments, including code reviews, penetration testing, and static/dynamic analysis.
  • Manage the identification, tracking, and remediation of security vulnerabilities within applications.
  • Work closely with development teams to address security issues and provide guidance on secure coding practices.

• Development & Automation:

  • Integrate security tools and processes into CI/CD pipelines to automate security testing and vulnerability management.
  • Develop and maintain security-related automation scripts and tools to enhance the efficiency of the security processes.
  • Collaborate with DevOps and development teams to implement secure DevOps (DevSecOps) practices.

• Incident Response & Compliance:

  • Lead incident response efforts related to application security breaches, including root cause analysis and corrective actions.
  • Ensure compliance with relevant security standards and regulations (e.g., OWASP, NIST, GDPR).
  • Stay up-to-date with the latest security threats, trends, and technologies, and provide recommendations to mitigate potential risks.

• Training & Awareness:

  • Develop and deliver security training programs for developers and other stakeholders.
  • Promote a security-first mindset across the organization through awareness campaigns and regular communication.

Qualifications:

• Education & Experience:

  • Bachelor’s degree in Computer Science, Information Security, or a related field (Master’s preferred).
  • Minimum of 5+ years of experience in application security
  • Extensive experience in secure software development, threat modeling, and vulnerability management.

• Technical Skills:

  • Proficient in programming languages such as Java, Python, C#, or JavaScript.
  • Deep knowledge of security frameworks, tools, and best practices (e.g., OWASP, SAST/DAST tools).
  • Experience with cloud security (AWS, Azure, GCP) and container security (Docker, Kubernetes).
  • Strong understanding of network security, cryptography, and authentication protocols.

• Soft Skills:

• • Strong Mentorship and Leadership skills
  • Strong analytical and problem-solving abilities.
  • Effective communication skills, with the ability to convey complex security concepts to technical and non-technical stakeholders.

Preferred Certifications:

• CISSP (Certified Information Systems Security Professional)
• CEH (Certified Ethical Hacker)
• OSCP (Offensive Security Certified Professional)
• CSSLP (Certified Secure Software Lifecycle Professional)

What We Offer:

• Competitive salary and benefits package.
• Opportunities for professional development and career growth.
• A collaborative and innovative work environment.