Application Security Engineer

Compensation: $150-200kResponsibilities: Perform Application Security scans (e.g. DAST and SCA) on applications and APIs to identify security vulnerabilities and weaknessesTriage security findings and collaborate with development teams to prioritize and remediate identified vulnerabilitiesDrive threat modelling as a standard part of the SDLC, and develop and maintain threat models for critical applications, identifying potential security risks and proposing mitigationsDrive the Security Champions program, and define and promote secure coding practices, patterns, and standards across development teamsConduct security reviews and provide guidance on security requirements for new features and projectsAssist in the analysis, selection and rollout of new application security tools, processes, and standardsQualifications: Proven experience in application security with a focus on application security testing and vulnerability managementHands-on experience with Application Security toolsStrong understanding of common application vulnerabilities (e.g., OWASP Top 10) and mitigation techniquesExperience with threat modelling methodologies and toolsProficiency in at least one programming language (e.g., Java, Python, JavaScript) Excellent communication and collaboration skills, with the ability to work effectively in cross functional teamsStrong understanding of risk managementDegree in a technology discipline (Computer Science, Information Management, Computer Engineering, Cybersecurity or equivalent) Relevant security certifications (e.g. CISSP, CEH, CSSLP) or equivalent is preferred