AppSec Engineer

Responsibilities

• Support and continuously improve the company's Vulnerability Management process.
• Perform vulnerability triage, risk assessment, prioritization, and remediation tracking.
• Work with engineering teams to ensure timely remediation of identified vulnerabilities.
• Analyze findings from multiple security tools and sources and reduce noise through effective prioritization.
• Monitor vulnerability remediation SLAs and provide visibility into security posture through reporting and metrics.
• Participate in threat modeling activities for new systems, services, and significant architectural changes.
• Conduct security risk assessments and provide actionable recommendations.
• Define and maintain application security requirements in collaboration with engineering teams.
• Support Secure SDLC initiatives and help integrate security practices into development workflows.
• Provide guidance to developers and DevOps engineers on vulnerability remediation and secure design practices.

Languages