Cybersecurity Solutions Architect

Application Security Engineer

The primary objective of this role is to ensure the security and integrity of our applications. This includes identifying potential vulnerabilities, implementing remediation strategies, and collaborating with cross-functional teams to fortify our application security posture.

• \
• Implement and support the application security program\
• Work closely with development teams to integrate security into the software development lifecycle (SDLC)\
• Educate developers on application security risks and mitigation techniques\
• Enhance the current security assurance level related to application security through automation, continuous integration pipelines, and other means\
• Publish secure coding standards and practices and share the material with development teams\
• Perform security architecture and design reviews of systems and applications\
• Support processes relevant to vulnerability assessments, penetration tests, and security code reviews of the applications portfolio\
• Identify application security risks and support the remediation of findings\
• Perform regular security audits of applications\
• Work with product management department to ensure features and functionality conform to security requirements\

• \
• Bachelor's/Master's degree in information security or a related field\
• Minimum 3 years' working experience in the application security field\
• Strong experience working closely with developers and product teams\
• Experience with secure coding practices, application security standards, maturity models, and frameworks such as OWASP SAMM\
• In-depth knowledge of DevSecOps methodologies\
• Hands-on experience in application security practices such as SAST, SCA, and DAST using major platforms such as Gitlab Application Security suite\
• Experience in securing web and mobile applications, cloud services, containers, Kubernetes, Serverless, API Gateways, etc\
• Experience in penetration testing and vulnerability management\
• Experience with various programming languages such as Java, PHP, Angular, Go, Kotlin, etc\
• Experience in the agile software development model and integration of security practices\
• Strong communication and organizational skills\
• Advantage if holding Application Security and DevSecOps certifications such as CEH, CDP, GWEB, or CSSLP\

• \
• Attractive remuneration package\
• Private health insurance\
• Corporate pension fund\
• Intellectually stimulating work environment\
• Continuous personal development and international training opportunities\
• The hiring process consists of three stages: introduction, deep dive, and final connection\