Application Security Engineer

Job Summary We are seeking an experienced Application Security Engineer with strong expertise in Application Security, Vulnerability Management, and Security Operations. The ideal candidate will have hands-on experience identifying, analyzing, prioritizing, and remediating application and infrastructure security vulnerabilities while working closely with development, DevOps, infrastructure, and Security Operations teams. This is an L3 / Senior-level role, requiring the ability to independently investigate complex security issues, drive remediation, improve vulnerability management processes, and support security incident and operational activities. Required Skills Application Security – Intermediate to Master / L3 level Vulnerability Management – Strong hands-on experience Security Operations – Intermediate level Application vulnerability assessment and remediation Vulnerability scanning and management tools Secure SDLC and DevSecOps practices OWASP Top 10 and common application security vulnerabilities CVE, CVSS scoring, risk assessment, and vulnerability prioritization Security incident investigation and triage Working knowledge of cloud and container security Strong collaboration with Development, DevOps, Infrastructure, and Security teams

Key Responsibilities

Perform and support application security assessments and vulnerability analysis. Identify, investigate, validate, and prioritize security vulnerabilities. Manage the complete vulnerability lifecycle, including identification, triage, remediation tracking, validation, and closure. Analyze vulnerabilities using CVE, CVSS, exploitability, business impact, and risk. Work with application development and engineering teams to recommend remediation and secure coding solutions. Support Security Operations activities, including security alert investigation, triage, and incident support. Perform root cause analysis for recurring security vulnerabilities and recommend preventive controls. Support vulnerability scanning across applications, APIs, infrastructure, cloud, and container environments. Track remediation SLAs and provide vulnerability status reporting to security and technology stakeholders. Participate in security incident investigations and coordinate with SOC and engineering teams when required. Support implementation and improvement of DevSecOps and Secure SDLC practices. Stay updated on emerging vulnerabilities, threats, exploits, and application security risks. Preferred Technical Skills Vulnerability Management tools such as Qualys, Tenable/Nessus, Rapid7 InsightVM Application Security tools such as Snyk, Veracode, Checkmarx, Fortify, SonarQube SAST, DAST, SCA and API security testing OWASP Top 10 CVE/CVSS and vulnerability prioritization SIEM/SOC tools such as Splunk, Sentinel, QRadar, or similar Cloud security experience with AWS, Azure, or Google Cloud Platform Container and Kubernetes security knowledge CI/CD and DevSecOps integration Scripting knowledge in Python, PowerShell, or Bash Experience Required 5+ years of experience in Cybersecurity, Application Security, or Vulnerability Management. Strong hands-on experience in Application Security and Vulnerability Management. Experience working with Security Operations / SOC teams. Ability to independently handle complex vulnerabilities and security investigations at an L3 level.