Description

DAY TO DAY

• Partner closely with developers throughout the Secure SDLC.
• Integrate and configure AppSec tooling within GitHub/GitHub Actions workflows.
• Work hands-on with SAST, DAST, and SCA tools.
• Configure security scanning, checks, policies, and risk-based gates within developer workflows.
• Review findings, validate vulnerabilities and false positives, prioritize risk, and drive remediation through closure.
• Work directly with developers to troubleshoot vulnerabilities, explain root cause, recommend code-level fixes, and validate remediation.
• Identify AppSec gaps and independently develop technical solutions.
• Support AI-assisted development security, threat modeling, vulnerability triage, and security automation.

MUST HAVES

• 5–7+ years of Cyber Security/IT experience, including 3+ years of recent hands-on Application Security engineering.
• Strong hands-on experience with SAST, DAST, SCA, Secure SDLC, and DevSecOps.
• Hands-on experience integrating and configuring security tooling within GitHub/GitHub Actions and developer workflows.
• Strong vulnerability triage and remediation experience, including validating findings, false positives, prioritizing risk, and driving issues through closure.
• Strong developer-facing AppSec experience, including troubleshooting vulnerabilities, explaining root cause, and recommending code-level fixes.
• Meaningful hands-on AI security experience related to AppSec, AI-assisted development, threat modeling, vulnerability management, or security automation

PLUSSES

• Agentic-code security experience — securing AI coding agents, agent-generated code, or agentic development workflows.
• Python scripting/automation — personally writing Python to automate AppSec or security processes.
• AI-assisted code review, threat modeling, vulnerability triage, or remediation.
• Built automation around security findings, developer workflows, or vulnerability management.
• GitHub Advanced Security / GitHub-native security tooling experience. Cloud, API, Kubernetes/container, or IaC security experience

Key Skills

Education

Any Graduate