Application security engineer

We are looking for an Application Security Engineer to support the Secure Coding team in improving application security and secure coding practices. The role involves working closely with software development teams to analyse security findings, support vulnerability remediation, improve security tooling, and promote secure development standards. You will also contribute to emerging security topics, including AI-driven threats and agentic development.

• Maintain and improve Secure Coding Standards and security practices.
• Analyse and prioritise findings from SAST and SCA tools.
• Support developers in understanding security findings and implementing appropriate fixes.
• Help development teams identify and remediate code vulnerabilities.
• Fine-tune security tool rulesets to reduce false positives and improve finding quality.
• Contribute to repository scanning tools and security tooling improvements.
• Explore emerging security risks, including AI-driven attacks.
• Share security knowledge and promote secure coding practices across development teams.

• Experience in Secure Coding and Application Security.
• Proficiency in at least one programming language.
• Hands-on experience with SAST and SCA tools or similar technologies.
• Ability to analyse and prioritise security findings.
• Strong understanding of vulnerability remediation and secure coding practices.
• Ability to communicate security issues and solutions clearly to developers.
• Experience working within large corporate organisations.
• Fluent English.
• Software Development
• Microsoft Azure
• Agile Way of Working
• DevOps – CI/CD
• Будет плюсом: Experience with Fortify; Experience with Nexus Lifecycle; Experience with internal repository scanning tools; Knowledge of AI-driven threats and agentic development risks; Experience maintaining secure coding standards and guidelines

• Условий в вакансии нет