Application Security Engineer
Mohammed AhmedUnited StatesMIDPosted 2h ago
SASTDASTSoftware Composition AnalysisAWS IAMIdentity-as-a-ServiceCI/CD pipelineSecurity loggingMonitoringSIEMVulnerability identificationIAMMFAContainer scanningSecrets managementDockerKubernetesThreat modelingPatch managementEDRHIDSNISTISO 27001CISSPCEHCASE
About the Role
We are seeking an experienced Application Security Engineer to help secure applications, APIs, cloud environments, and infrastructure. This role focuses on implementing security controls and managing vulnerabilities across the software development lifecycle.
Key Responsibilities
• Implement secure server baselines for Windows, Linux, and cloud environments using CIS Benchmarks and security standards
• Conduct SAST, DAST, and SCA assessments for applications
• Manage IAM, privileged access, service accounts, API keys, and MFA
• Integrate security controls, container scanning, and secrets management into CI/CD pipelines
• Investigate application and server security incidents
• Review Docker, Kubernetes, application, and server configurations
• Support threat modeling, patch management, secure releases, and security documentation
• Integrate EDR/HIDS telemetry and application events with SIEM platforms
Requirements
• Strong application security concepts and practices
• Experience with SAST, DAST, and Software Composition Analysis (SCA) tools
• AWS IAM and Identity-as-a-Service (IDaaS) solutions
• CI/CD pipeline tools and security integration across the SDLC
• Security logging, monitoring, and SIEM tools
• Vulnerability identification, prioritization, and remediation