Senior Application Security Engineer

We are seeking an experienced and proactive Senior Application Security Engineer with Coding\Scripting experience(DevSecOps experiences) to join our Product Security team within the R&D department. This role is crucial for designing and implementing a robust Secure Software Development Lifecycle (SSDL) process and technology stack. The ideal candidate will have a strong background in product security, coupled with expertise in DevOps, application security, and infrastructure management. The role also involves close collaboration with DevOps, development, and SOC teams.
Responsibilities:
Design, build, and implement the Secure Software Development Lifecycle (SSDL) process, integrating security into all stages of the software development lifecycle.
Develop and oversee the implementation of security tools and technologies, including SAST, DAST, SCA, SNAP, ASPM, CDR, vulnerability scanners, and Kubernetes (K8s) security tooling.
Validate and secure Infrastructure as Code (IaC) using tools like Terraform, ensuring compliance with security best practices.
Contribute directly to the development and security of CI/CD pipelines and IaC code.
Collaborate closely with DevOps, development, and SOC teams to embed security practices into product development from initial design through to deployment.
Conduct security assessments, code reviews, and vulnerability analysis using CVSS or similar methodologies to identify and mitigate risks.
Automate security testing and compliance checks across Azure DevOps pipelines and cloud environments, focusing on Azure, AWS, and Kubernetes.
Provide expert guidance on secure coding practices and help establish security policies and standards.
Monitor and respond to security incidents across both Windows and Linux environments, driving continuous improvement in security posture.
Lead projects to completion, motivate team members, and foster a collaborative and high-performing team environment.
Exhibit strong self-driven learning abilities, staying current with industry trends and technologies.
Proactively identify and drive security initiatives, taking ownership and pushing boundaries to ensure the highest security standards.
Implement and manage metrics and monitoring systems, ensuring comprehensive visibility into security performance. Experience with building a security data lake is an advantage, particularly with Azure Analytics and Sentinel.