Application Security Specialist

80 PLN/ godz./ godz.B2BB2B (netto)

MidHybryda·WrocławFull-time·B2B

#474524·Dodano dziś·0

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

CybersecurityApplication SecurityPython Java .NetAppSecSemgrepSonarQubeHCL AppscanZAP

Podsumowanie oferty

You will help development teams build secure software for a global industrial client as part of the AppSec Platform & Security Engineering team. The role focuses on identifying, assessing and mitigating security risks across the software development lifecycle using SAST, DAST, SCA and AppSec tools.

Wymagania

Degree in Computer Science, Information Security, Cybersecurity or a related field, or equivalent practical experience
4–5 years of experience in application security, software security, secure software development or a closely related field
Hands-on experience with application security assessments, vulnerability analysis or security testing
Experience working with development teams to identify and fix security issues
Intermediate programming or scripting skills in Python, Java or .NET, with experience building digital products
Experience with AppSec tools such as Semgrep, SonarQube, HCL AppScan, ZAP, Black Duck or Sonatype Lifecycle (or comparable)
Good understanding of OWASP Top 10, OWASP ASVS and other relevant OWASP standards
Familiarity with SAST, DAST and SCA and their integration into CI/CD pipelines
Experience with cloud-native application security, containers or Kubernetes
Familiarity with DevSecOps practices, version control and CI/CD, preferably Jenkins, Git, Docker or Kubernetes
Understanding of vulnerability management, risk assessment and remediation processes
Strong analytical skills, attention to detail and the ability to explain technical findings to different audiences
Collaborative, proactive mindset with a sense of ownership
Fluent English

Nice to have:

Experience with threat modelling and security design reviews
Familiarity with NIST, OWASP DSOMM and OWASP SAMM
Application security or cybersecurity certifications
Awareness of emerging regulations such as the EU Cyber Resilience Act (CRA)

Obowiązki

Support development teams in integrating security into the SDLC and applying secure coding practices
Perform and support security assessments using AppSec tools, analyse findings, prioritise risks and guide teams through vulnerability remediation
Work with SAST, DAST, SCA and other security testing technologies to identify application risks
Contribute to threat modelling, security design reviews and the use of established security patterns
Support integration and improvement of AppSec tools and processes within CI/CD pipelines and development workflows
Contribute to security awareness activities, training materials and guidance for development teams
Help teams implement security requirements, standards and internal policies
Identify opportunities to improve AppSec processes, tooling and ways of working
Communicate findings, explain risks and support practical remediation with developers, architects and security colleagues

OPTIVEUM SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ

160 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz