Application Security Engineer

We are seeking an Application Security Engineer to join our security team. In this role, you will work closely with development and product teams to identify, assess, and remediate security vulnerabilities within our applications. You will be responsible for conducting penetration testing, vulnerability assessments, and ensuring secure coding practices are followed across our products. This is an exciting opportunity to directly impact the security of our products and services.

Requirements:

• 1-3 years of hands-on experience in application security, vulnerability management, or penetration testing.
• Thorough knowledge of web application security testing including the ability to identify and exploit common categories of vulnerabilities (e.g., OWASP Top 10)
• Experience analyzing vulnerabilities and assessing severity using CVSS
• Fluent in English
• Comfortable automating common tasks using Python
• Coordinating or participating in vulnerability disclosure programs.

Responsabilities:

• Assess and triage security vulnerabilities, validate reports, and collaborate with developers to address critical issues.
• Assist in producing detailed security documentation for both internal and external stakeholders.

• Coordinate and conduct both internal and external penetration testing efforts to uncover vulnerabilities and strengthen defenses.
• Manage third-party security testing engagements and ensure timely remediation of findings.

• Integrate security testing into the development pipeline by performing pre-release scans and manual security assessments.
• Conduct security testing, including dynamic and static analysis of web applications, before deployment.