Application Security Specialist

Application Security Engineer

Join a growing cybersecurity company focused on developing advanced security solutions for modern digital environments. Lead secure application design and support development teams throughout the SDLC. In this role, you’ll work closely with engineering and product teams to integrate and optimize security controls, review security findings, perform threat modeling, and ensure security is embedded throughout the development lifecycle.

What you’ll do:

• Design and review secure application architectures across Web, APIs, Microservices, and AI-enabled environments.
• Perform threat modeling and hands-on security reviews, with a focus on OWASP Top 10, API risks, business logic flaws, and data exposure.
• Review application code, architecture, and security controls to identify risks and recommend practical remediation solutions.
• Support engineering teams in embedding security throughout the SDLC, including SAST, DAST, SCA, secrets scanning, and CI/CD security controls.
• Review and prioritize security findings and guide development teams through effective remediation.
• Translate technical vulnerabilities into clear business risks for engineering, product, and executive stakeholders.

Requirements:

• 3+ years of experience in Application Security or Secure Software Development.
• Experience designing secure application architectures and reviewing complex application ecosystems.
• Ability to audit and review code in at least one programming language.
• Hands-on experience with threat modeling methodologies, such as STRIDE.
• Experience working with SAST, DAST, SCA, findings triage, and guiding engineers through remediation.
• Strong understanding of modern application environments, including APIs, Microservices, Cloud-Native applications, and AI/LLM integrations.
• Excellent communication skills and the ability to work effectively with engineering teams, product stakeholders, and senior leadership.