Application Security Engineer

Company Description

Peer Security is a global leader in cybersecurity, specializing in web application, mobile, thick client, and infrastructure penetration testing. Established by prominent cybersecurity researchers, the organization is dedicated to fortifying businesses against evolving cyber threats. By leveraging advanced tools and methodologies, Peer Security provides tailored security solutions that address unique vulnerabilities and ensure resilience in the digital ecosystem. With a commitment to excellence, the company focuses on delivering professional services from risk assessments to post-engagement support. Peer Security's mission is to empower businesses worldwide by safeguarding their digital operations and advancing cybersecurity innovation.

Role Description

As an Application Security Engineer at Peer Security, you will play a key role in helping our customers integrate security into their development processes and improve secure software development practices across their organizations, including modern development workflows that incorporate AI tools and AI-powered features.

In this role, you will work closely with customer development and engineering teams to embed security throughout the Software Development Lifecycle (SSDLC). This includes reviewing application architectures and code, identifying vulnerabilities, promoting secure coding practices, guiding teams through secure development of AI-powered features, and helping them implement practical security controls that strengthen the overall security posture of their applications.

Responsibilities

• Support the implementation of Secure Software Development Lifecycle (SSDLC) practices.
• Work closely with developers to promote secure coding practices across traditional and AI-powered applications.
• Accompany development teams throughout AI-related projects - from design and architecture through implementation and deployment - ensuring security is built in at every stage.
• Perform secure code reviews and assist in identifying and fixing security issues, including code generated with AI coding assistants.
• Advise on secure development practices when working with LLMs, AI APIs, and AI-assisted coding tools (e.g., Copilot, Cursor, Claude Code).
• Help integrate security testing tools (SAST, DAST, SCA) into development pipelines.
• Participate in threat modeling and design discussions for new features and services, including AI-powered components.
• Assist in defining secure development guidelines and best practices for both traditional and AI-driven development workflows.
• Work with engineering teams to prioritize and remediate vulnerabilities.
• Support automation of security checks within CI/CD pipelines.

Qualifications

• Strong interest in Application Security and secure software development.
• Understanding of common web application vulnerabilities (OWASP Top 10).
• Ability to read and understand code in at least one modern programming language (e.g., Python, JavaScript, Java, Go, etc.).
• Solid familiarity with modern software development processes, Git workflows, code review practices, and CI/CD environments.
• Familiarity with AI-assisted development workflows and how LLMs/AI APIs are integrated into modern applications.
• Basic knowledge of security testing tools or application security practices.
• Strong problem-solving skills and ability to work closely with development teams..

Mandatory: Minimum 3 years of hands-on experience in Application Security, secure software development, penetration testing, or a related cybersecurity role.

Nice to Have

• Experience guiding or consulting development teams on AI-related projects or AI feature integration.
• Awareness of AI/LLM security risks (e.g., OWASP Top 10 for LLMs — prompt injection, insecure output handling, data leakage).
• Hands-on experience with AI coding assistants (Copilot, Cursor, Claude Code) in real development workflows.
• Experience performing web application penetration testing.
• Understanding of manual vulnerability discovery techniques for web applications and APIs.
• Experience identifying and exploiting OWASP Top 10 vulnerabilities in real-world applications.
• Experience testing applications in cloud environments (AWS / GCP / Azure).