Security Engineer

Senior Information Security EngineerJob Summary: This role is responsible for driving application security and vulnerability management across the software development lifecycle. The position focuses on identifying, analyzing, and mitigating security risks within applications and third-party components through a combination of automated and manual testing techniques.The engineer will partner closely with development and platform teams to embed security into engineering workflows, promote secure coding practices, and ensure adherence to industry-standard compliance frameworks. This role requires a strong background in application security, secure development, and integrating security into modern delivery pipelines.Key Responsibilities:Application Security & TestingPerform static, dynamic, and software composition analysis to identify vulnerabilities in applications and dependenciesAnalyze findings, determine root causes, and work with engineering teams to remediate issues effectivelyConduct manual validation and targeted testing to improve accuracy of automated resultsIntegrate security testing into build and deployment pipelinesSecure Development PracticesEvaluate application code for security weaknesses across modern programming languagesProvide guidance on common vulnerability classes and secure coding techniquesSupport development teams in remediating findings and improving overall code securityContribute to automation and scripting efforts to enhance security testing capabilitiesVulnerability Management & ComplianceEnsure regular security assessments are conducted and findings are addressed within defined timelinesReview and validate remediation efforts, including risk acceptances where appropriateMaintain alignment with widely recognized security and regulatory standardsManage documentation and tracking of security findings and artifactsCollaboration & Security OperationsPartner with engineering, infrastructure, and security teams to strengthen application security postureSupport deployment and configuration of security controls within cloud and infrastructure environmentsStay current on emerging threats, vulnerabilities, and industry best practicesAssist with incident response activities, including investigation and containment of security eventsContribute to detection and monitoring improvements for critical systemsQualifications:Bachelor’s degree in Computer Science, Cybersecurity, or related field (or equivalent experience)5+ years of experience in application security, secure development, or related disciplinesExperience with application security testing methodologies (SAST, DAST, SCA)Strong understanding of common web application vulnerabilities and attack techniquesBackground in software development (e.g., Java, Python, or similar)Familiarity with secure SDLC practices and CI/CD environmentsExperience with cloud platforms and securing cloud-based workloadsScripting or automation experience to support security operationsPreferred:Industry certifications in offensive or application securityExperience with threat modeling or risk-based testing approachesExposure to digital forensics or malware analysisSoft Skills:Strong collaboration skills with the ability to influence engineering teamsClear communication and documentation capabilitiesAnalytical mindset with a focus on reducing risk and improving security posture