Senior Application Security Engineer

Company Description

Peer Security is a cybersecurity company specializing in advanced penetration testing, Application Security, and security consulting. Founded by experienced security researchers, we help organizations identify security risks, strengthen their development environments, and build secure products.

We combine deep technical expertise with a practical, engineering-focused approach to security, working closely with our customers to deliver meaningful security improvements.

Role Description

We are looking for a hands-on Senior Application Security Engineer to join Peer Security and work closely with our customers' development, DevOps, cloud, and security teams.

In this role, you will help organizations integrate security into their Software Development Lifecycle (SSDLC), improve security across CI/CD pipelines and cloud environments, and identify and remediate vulnerabilities in modern applications and infrastructure.

The position combines Application Security, DevSecOps, Cloud Security, and emerging AI security technologies, with an emphasis on practical solutions, technical ownership, and collaboration with engineering teams.

What You'll Do

• Lead Application Security and SSDLC initiatives, working closely with development, DevOps, and security teams.
• Assess and improve security across CI/CD pipelines, development workflows, and software supply chains.
• Work hands-on with Wiz to identify, prioritize, and remediate cloud security risks.
• Conduct application security reviews, threat modeling, secure code reviews, and security assessments across Web, Mobile, and APIs.
• Identify vulnerabilities, including authentication, authorization, business logic, and common OWASP-related security risks.
• Help integrate and improve security controls such as SAST, DAST, SCA, secrets scanning, and cloud security tools.
• Assess security risks in cloud environments and support engineering teams with practical remediation.
• Explore and implement security improvements related to AI-assisted development, LLM-based applications, and security automation.
• Act as a trusted technical security advisor, helping customers build secure and scalable development practices.

Requirements

• 4+ years of experience in Application Security, Product Security, DevSecOps, Cloud Security, or related security engineering roles.
• Hands-on experience with Wiz – mandatory.
• Strong hands-on experience with CI/CD pipelines and modern development workflows – mandatory.
• Strong understanding of Application Security, SSDLC, OWASP, and common Web and API security vulnerabilities.
• Experience working with cloud environments such as AWS, Azure, or GCP.
• Familiarity with application security testing, secure code reviews, threat modeling, and vulnerability management.
• Good understanding of software development, Git workflows, and the ability to read and analyze code.
• Familiarity with AI/LLM technologies, AI-assisted development tools, and their security implications.
• Ability to work independently, communicate effectively with engineering teams, and translate security risks into practical solutions.

Nice to Have

• Hands-on penetration testing experience across Web, Mobile, APIs, or cloud environments.
• Experience with Burp Suite and manual vulnerability research.
• Experience with Kubernetes, containers, Terraform, or Infrastructure as Code.
• Experience with GitHub Actions, GitLab CI/CD, Jenkins, or similar platforms.
• Development or scripting experience with Python, JavaScript, or similar languages.
• Experience with Android/iOS application security.
• Experience with AI security, LLM applications, AI agents, RAG, or AI-powered security automation.
• Relevant security certifications.