Application Security Engineer

~90 - 100 PLN/ godz./ godz.B2BB2B (netto)

MidHybryda·WrocławInne·B2B

#472798·Dodano 2 dni temu·1

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

OWASP TOP 10SecuritySonarQube

Podsumowanie oferty

You will help development teams adopt secure coding practices and assess application vulnerabilities across the software development lifecycle. The role focuses on application security, security testing with SAST, DAST and SCA, and integrating security checks into CI/CD pipelines.

Wymagania

2–5 years of hands-on experience in application security, software security engineering or secure software development.
Practical experience operating and configuring AppSec tools such as Semgrep, SonarQube, HCL AppScan, OWASP ZAP, Black Duck and Sonatype Lifecycle, or equivalent solutions.
Understanding of web and API vulnerability classifications and standards, including OWASP Top 10, OWASP ASVS and CWE.
Familiarity with SAST, DAST and SCA.
Intermediate hands-on programming or scripting skills in Python, Java or .NET to review application code and automate security tasks.
Familiarity with CI/CD systems, containerized environments and cloud-native application security.
Ability to manage vulnerability triage, risk scoring and issue tracking through remediation.
Bachelor's or Master's degree in Computer Science, Cybersecurity or Information Security, or equivalent practical industry experience.

Nice to have:

Hands-on experience conducting threat modeling sessions and architectural security design reviews.
Familiarity with maturity models and governance frameworks such as NIST, OWASP SAMM or OWASP DSOMM.
Awareness of software security regulations such as the EU Cyber Resilience Act.
Industry certifications such as CSSLP, CEH, CompTIA Security+, AWS/Azure Security or GIAC credentials.

Obowiązki

Support development teams in adopting secure coding practices and embedding security throughout the full software development lifecycle (SDLC).
Execute and evaluate security assessments using SAST, DAST and SCA tooling to identify, prioritize and remediate application vulnerabilities.
Contribute to threat modeling, architectural design reviews and implementation of established security patterns.
Integrate and optimize automated application security testing tools and quality gates within CI/CD pipelines (DevSecOps).
Develop and deliver security awareness programs, training materials and practical implementation guidelines for engineering teams.
Assist product and platform teams in aligning with internal security policies, industry baselines and regulatory compliance standards.
Refine application security tooling, triage workflows and vulnerability management processes.
Communicate vulnerability findings, risk implications and remediation strategies to technical and non-technical stakeholders.

SNI

21 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz