Jobs → Engineering → Application Security Engineer

About the Role We are seeking an experienced Application Security Engineer to join our team. This role focuses on implementing and maintaining secure server baselines, conducting security assessments, and managing identity and access controls across various platforms. Key Responsibilities • Implement and maintain secure server baselines for Windows, Linux, and Cloud environments aligned with CIS Benchmarks • Conduct SAST, DAST, and SCA assessments for in-house and third-party applications • Identify, prioritize, and coordinate remediation of vulnerabilities across applications, APIs, databases, and infrastructure • Manage Identity & Access Management (IAM), including privileged access, service accounts, API keys, and MFA • Investigate and respond to server and application security incidents • Integrate security controls into CI/CD pipelines, including container scanning and secrets management • Ensure security logs, EDR/HIDS telemetry, and application events are integrated with the SIEM system • Review server, application, Docker, and Kubernetes configurations to identify and mitigate security risks • Support patch management, security reviews, threat modeling, and secure release processes Requirements • Strong understanding of application security concepts and practices • Experience with SAST, DAST, and SCA tools • Proficiency in managing AWS IAM solutions and practices • Experience with CI/CD Pipeline tools and integrating security into the development lifecycle • Familiarity with security logging and monitoring tools, particularly SIEM • Bachelor's degree in Computer Science, Information Technology, or a related field • 7-10 years of experience in application security or related fields • Strong analytical and problem-solving skills • Excellent communication and collaboration skills