Application Security Engineer

Company Description

Peer Security is a global leader in cybersecurity, specializing in web application, mobile, thick client, and infrastructure penetration testing. Established by prominent cybersecurity researchers, the organization is dedicated to fortifying businesses against evolving cyber threats. By leveraging advanced tools and methodologies, Peer Security provides tailored security solutions that address unique vulnerabilities and ensure resilience in the digital ecosystem. With a commitment to excellence, the company focuses on delivering professional services from risk assessments to post-engagement support. Peer Security's mission is to empower businesses worldwide by safeguarding their digital operations and advancing cybersecurity innovation.

Role Description

As an Application Security Engineer (Secure SDLC) at Peer Security, you will play a key role in helping our customers integrate security into their development processes and improve secure software development practices across their organizations.

In this role, you will work closely with customer development and engineering teams to embed security throughout the Software Development Lifecycle (SSDLC). This includes reviewing application architectures and code, identifying vulnerabilities, promoting secure coding practices, and helping teams implement practical security controls that strengthen the overall security posture of their applications.

Responsibilities

• Support the implementation of Secure Software Development Lifecycle (SSDLC) practices.
• Work closely with developers to promote secure coding practices.
• Perform secure code reviews and assist in identifying and fixing security issues.
• Help integrate security testing tools (SAST, DAST, SCA) into development pipelines.
• Participate in threat modeling and design discussions for new features and services.
• Assist in defining secure development guidelines and best practices.
• Work with engineering teams to prioritize and remediate vulnerabilities.
• Support automation of security checks within CI/CD pipelines.

Qualifications

• Strong interest in Application Security and secure software development.
• Understanding of common web application vulnerabilities (OWASP Top 10).
• Ability to read and understand code in at least one modern programming language (e.g., Python, JavaScript, Java, Go, etc.).
• Familiarity with software development processes and CI/CD environments.
• Basic knowledge of security testing tools or application security practices.
• Strong problem-solving skills and ability to work closely with development teams.

Nice to Have

• Experience performing web application penetration testing.
• Understanding of manual vulnerability discovery techniques for web applications and APIs.
• Experience identifying and exploiting OWASP Top 10 vulnerabilities in real-world applications.
• Experience testing applications in cloud environments (AWS / GCP / Azure).