Application Security Engineer Job Description Template

We are seeking an experienced Application Security Engineer to join our team. This role will collaborate with other IT professionals as part of our security engineering team to anticipate and correct vulnerabilities in both client-facing and internal applications. The ideal candidate will not just be an expert in application security, but have the expertise and capability to provide technical leadership and guidance on security best practices to the entire development team. 

Typical Duties and Responsibilities

  • Perform proof of concept testing for new security products
  • Evaluate new technologies and tools that will impact organization security
  • Analyze proprietary and third-party software to identify and address security concerns
  • Assess the organization’s security architecture and scan code to identify vulnerabilities
  • Guide development teams on defensive coding and remediation techniques
  • Provide security training and guidance for developer teams
  • Review existing applications and software to identify security improvements
  • Install, configure, and use new security tools implemented by the organization
  • Develop and refine app and product security best practices 
  • Maintain documentation of application security controls
  • Conduct penetration testing and provide retesting support
  • Serve as a subject matter expert on common attack vectors and application security for developer teams and organization leadership

Education

  • Bachelor’s degree in engineering, computer science, information security, or a related field

Required Skills and Experience

  • 3+ years of experience in an IT role, preferably in a security team
  • Experience assessing vulnerabilities in business software and systems
  • Experience establishing software development policies 
  • Experience with application design, risk assessment, and penetration testing
  • Experience performing blackbox, greybox, and whitebox security assessments of applications using HTTP and/or proprietary protocols
  • Container DevOps experience
  • Proficient in at least one programming language such as Java, .NET, or Python
  • Deep knowledge of common security vulnerabilities
  • Knowledge of application architectural patterns (MVC, Microservices, etc.)
  • Knowledge of secure development lifecycle principles
  • Strong problem-solving and analytical skills

Preferred Qualifications

  • Experience with iOS or Android security
  • Certification in information security (CISSP, CISM, CEH, etc.)
Contact us

Recruit with Nexus IT Group