Support SAST and DAST operations, ensuring consistent scanning of applications and identifying security vulnerabilities
Manage and monitor application security tools, including onboarding new applications, refining configurations, and analyzing scan results
Triage and validate SAST and DAST findings, working with developers to remediate security issues and reduce false positives
Improve vulnerability management workflows, ensuring findings are properly tracked in Jira and remediated within SLAs
Enhance automation in security testing by integrating SAST and DAST into CI/CD pipelines for early detection of security issues
Collaborate with development teams to drive secure coding initiatives and provide guidance on security best practices
Assist in the refinement of security policies and procedures related to application security testing
Maintain documentation for security scanning processes, remediation guidelines, and tool configurations
Stay updated on emerging threats and security trends to improve application security testing methodologies

3+ years of experience in Application Security or Software Security Engineering
Bachelor’s degree in computer science, Cybersecurity, or related field
Experience with SAST tools (e.g., Mend.io, SonarQube, Veracode)
Experience with DAST tools (e.g., AppCheck, Burp Suite, ZAP)
Strong understanding of secure coding practices and OWASP Top 10 vulnerabilities
Experience working with Jira for security issue tracking and remediation workflows
Basic knowledge of CI/CD pipelines and integrating security tools into DevOps workflows
Strong analytical and problem-solving skills with attention to detail
Ability to collaborate with development and security teams to improve application security

Application Security Engineer

Key skills