Senior Application Security Engineer

Responsibilities

• Perform security assessments of web applications, APIs, services, and supporting components
• Facilitate threat modeling and review architectures and technical designs from a security perspective
• Conduct secure code reviews and identify vulnerabilities and insecure implementation patterns
• Validate findings from automated tools, reduce false positives, and prioritize issues based on exploitability and business impact
• Provide clear, actionable remediation guidance and secure implementation recommendations
• Track findings through remediation and retesting in collaboration with development teams
• Advise teams on authentication, authorization, session management, input validation, data protection, cryptography, secrets handling, and API security controls
• Contribute to secure SDLC practices, security standards, guidelines, and reusable security patterns
• Communicate security risks and recommendations to technical and non-technical stakeholders

Languages