7+ years in information security and 3+ years in software development.

Bachelor’s degree or equivalent in Computer Science, Information Security, or related field.

Effective communication and leadership abilities; capable of influencing technical and non-technical collaborators including management.

Dedicated and proactive, finding opportunities and leading initiatives independently.

Deep understanding of enterprise and cloud-native architectures and their secure design.

Expertise in network and web protocols (TCP/IP, TLS, HTTPS, OAuth 2.0, OpenID Connect) and common attack vectors.

Proven expertise in guiding security development and code evaluations and providing actionable, risk-based recommendations.

Skilled in multiple programming languages (e.g., Java, C/C++, JavaScript, Python) and mitigating vulnerabilities such as OWASP Top 10.

Experience integrating SAST, DAST, and dependency scanning into CI/CD pipelines.

Familiar with Agile, DevOps, and modern delivery practices.

Hands-on experience with cloud technologies (AWS, Azure, GCP, Kubernetes, service mesh, CDN) including secure configuration and identity management.

Desired Experience

Senior Application Security Engineer

Responsibilities