Security Engineer

Brak informacji o wynagrodzeniu

MidHybryda·WrocławFull-time·B2B

#472882·Dodano 2 dni temu·3

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

Application Security, Software SecurityOWASPSAST, DAST, SCACI/CDAppSec toolsPython, Java or .NETGit Jenkins Docker Kubernetes

Podsumowanie oferty

As a Professional Application Security Engineer, you will strengthen Application Security and embed security throughout the Software Development Lifecycle. The role combines hands-on application security, secure software development, vulnerability assessment and DevSecOps, working with development teams, architects and security professionals.

Wymagania

4–5 years of relevant professional experience in Application Security, Software Security, secure software development or a closely related area.
Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Security or a related discipline, or equivalent practical experience.
Hands-on experience with application security assessments, vulnerability analysis and security testing.
Practical experience working with software development teams to identify and remediate security issues.
Software development experience and the ability to write and review secure code.
Good understanding of OWASP Top 10 and OWASP ASVS.
Hands-on knowledge of SAST, DAST and SCA, including their integration into CI/CD pipelines.
Experience with AppSec tools such as Semgrep, SonarQube, HCL AppScan, ZAP, Black Duck or Sonatype Lifecycle, or comparable solutions.
Intermediate programming or scripting skills in Python, Java or .NET.
Experience with Git, Jenkins, Docker, Kubernetes or comparable technologies.
Understanding of cloud-native application security, containers and Kubernetes.
Knowledge of vulnerability management, risk assessment and security remediation processes.
Strong analytical and problem-solving skills.
Ability to translate technical security findings into clear, actionable recommendations.
Good written and verbal communication skills and a proactive, collaborative approach.

Nice to have:

Hands-on experience with threat modelling and security architecture or design reviews.
Knowledge of security frameworks and maturity models such as NIST, OWASP SAMM or OWASP DSOMM.
Relevant Application Security or cybersecurity certifications.
Understanding of emerging cybersecurity regulations and product security requirements, including the EU Cyber Resilience Act (CRA).
Experience supporting security awareness initiatives or delivering secure development guidance to engineering teams.

Obowiązki

Support development teams in integrating security throughout the SDLC and applying secure coding practices.
Perform and support application security assessments and vulnerability analysis.
Review and prioritize security findings and provide developers with practical remediation guidance.
Work with SAST, DAST and SCA solutions, including Semgrep, SonarQube, HCL AppScan, ZAP, Black Duck and Sonatype Lifecycle, or comparable tools.
Contribute to threat modelling, security design reviews and the implementation of established security patterns.
Integrate and improve application security tools and controls within CI/CD pipelines.
Support the security of cloud-native applications, containers and Kubernetes environments.
Help development teams implement relevant security standards, policies and requirements.
Contribute to security guidance, awareness activities and training materials.
Continuously improve AppSec processes, tooling and ways of working.
Communicate vulnerabilities, risks and remediation options clearly to technical and non-technical stakeholders.

Benefity

Opportunities to develop your technical expertise and professional competencies.

Billennium S.A.

71 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz