Maintain application security by performing vulnerability management activities and supporting secure development practices
Support deployment and tuning of code analysis and dependency management solutions
Participate in the definition and implementation of SDLC processes
Implement and run security scans (SAST, SCA, DAST) and assess identified vulnerabilities
Collaborate with development teams to identify, prioritize, and remediate security risks
Contribute to the implementation of security controls and security reporting
Promote secure coding practices and raise security awareness within teams
Monitor remediation progress and follow up on outstanding vulnerabilities
Ensure compliance with remediation timelines and SLAs
Support application security processes across multiple teams
Contribute to the measurement and continuous improvement of security processes
Participate in AppSec community activities, including awareness and sharing of best practices

Experience in cybersecurity, with a focus on application security and vulnerability management
Hands-on experience with application security tools and techniques (SAST, SCA, DAST)
Experience in vulnerability management processes
Familiarity with security tools (e.g., Qualys, Fortify, Nexus IQ)
Knowledge of OWASP Top 10 and related secure coding guidelines
Python scripting skills for automation
Working knowledge of development technologies (Java, Angular, REST APIs)
Strong analytical and problem-solving skills
Ability to collaborate effectively and work well in teams
Client-focused mindset and strong communication skills
English — Fluent
French — Fluent

Cyber Security Engineer – Application Security

Key skills