Description

Application Security Engineer responsible for penetration testing, vulnerability assessment, and secure development lifecycle integration.

Responsibilities

• Schedule and perform regular penetration tests on critical software and systems before production release.
• Analyze and validate vulnerabilities using manual testing and security platforms like Checkmarx, AppScan, Fortify, and Veracode.
• Automate security scans and integrate SAST, DAST, and SCA tools into CI/CD pipelines using Jenkins and GitHub.
• Conduct threat modeling, maintain vulnerability dashboards, and present findings to stakeholders.
• Support incident response, purple/red team exercises, and collaborate with developers to improve security practices.

Required Skills

• 5+ years of experience in application security, penetration testing, and vulnerability assessment.
• Proficient in Python, .NET, C, Java, and C++ with strong OOP concepts.
• Experience with web development using JavaScript, Node.js, React, HTML, ASP, ColdFusion, and JSP.
• Skilled in API testing, web services, JSON, and understanding internet architecture.
• Knowledge of relational databases (SQL Server, MySQL) and ability to write SQL queries.
• Familiarity with source code management (GitHub) and pipeline integration (Jenkins).
• Basic knowledge of Azure cloud services.

Preferred Skills

• Experience with OWASP Top 10 and manual verification of automated scan results.
• Background in 1-3 years of web development prior to security specialization.

Key Skills

Education

Any Graduate