About the role
Responsibilities Partner with US teams to provide security guidance as a subject matter expert around application security Collaborate with third-party engineers and product owners to identify, prioritize, and remediate vulnerabilities in mobile and web applications Review vulnerability findings and work with engineering teams to communicate and remediate security issues Maintain application security scan profiles and policies across SAST, DAST, SCA, container security, and IaC Integrate security into the software development lifecycle (SDLC), including secure coding practices and automated testing Conduct awareness campaigns to promote secure software development practices Monitor publicly disclosed vulnerabilities affecting applications and third-party dependencies Coordinate with incident response teams to perform root cause analysis on application security incidents Requirements Bachelor's degree and at least four years of experience in cybersecurity, software engineering, or application development Experience evaluating application security vulnerabilities for exploitability and business risk Familiarity with secure software development lifecycle (SSDLC) practices Knowledge of Git-based development workflows and CI/CD pipelines Knowledge of application security testing methodologies (SAST, DAST, SCA, secrets detection) Knowledge of secure coding principles and OWASP Top 10 Knowledge of modern authentication technologies (OAuth 2.0, OIDC, SAML, JWT) Knowledge of containers and container management (Docker, Kubernetes) Knowledge of Infrastructure as Code (Terraform, CloudFormation) Preferred Qualifications Experience developing software in modern programming languages (Java, Python, Go, etc.) Experience securing applications within Git-based DevSecOps environments Experience integrating application security controls into CI/CD pipelines Familiarity with AI-assisted software development tools