Application Security Engineer

About the role

The Application Security Engineer will design, implement and operate security controls that protect the company’s systems, applications and data. You will work closely with development and infrastructure teams to embed security throughout the software lifecycle and respond to incidents when they arise.

Key responsibilities

• Administer and enforce security policies for system and application access.
• Perform application security testing, penetration tests and vulnerability assessments across applications, operating systems and network layers.
• Lead threat modeling and security design reviews for new technologies and system changes.
• Respond to security incidents, isolate threats and remove unauthorized access.
• Research emerging threats, conduct root‑cause analysis and implement technical controls to reduce cloud‑based risks.
• Collaborate with Information Security partners to advance roadmaps and integrate security testing into development phases.
• Provide management with insights on business impact related to data compromise or system unavailability.

Required profile

• 5–7 years of experience securing cloud environments, primarily AWS, or equivalent expertise.
• Bachelor’s degree in a related field or equivalent practical experience.
• Strong time‑management, organizational skills and attention to detail.
• Proven ability to build partnerships and communicate security risks to senior leadership.

Required skills

• AWS cloud security
• Application security engineering
• Penetration testing
• Vulnerability assessment
• Threat modeling
• Incident response
• Security policy administration
• Security testing integration