Senior Application Security Engineer

Responsibilities

• Develop and enhance Malcode and CBOM capabilities.
• Implement workflow automation and process improvements.
• Integrate security tools, repositories, and supporting platforms.
• Enhance security analysis and reporting capabilities.
• Analyze findings for exploitability, severity, and business impact.
• Review source code, logs, and technical artifacts.
• Identify false positives and duplicate findings.
• Validate remediation activities and conduct retesting.
• Provide remediation guidance to application teams.
• Manage vulnerability and finding lifecycle processes.
• Track remediation progress and risk disposition.
• Produce operational and management reports.
• Support governance reviews and stakeholder engagements.

Requirements

• Strong experience in Application Security Testing, including SAST, DAST, and SCA.
• Hands-on knowledge of Software Composition Analysis (SCA) and dependency risk management.
• Strong understanding of Secure SDLC practices and application security principles.
• Experience in source code review, vulnerability assessment, and remediation validation.
• Proficiency in Python, PowerShell, or similar scripting languages for security automation.
• Experience with security reporting, analytics, and vulnerability management.
• Knowledge of SBOM/CBOM, malware analysis, and software supply-chain security.
• Strong understanding of vulnerability lifecycle management, risk assessment, and security governance.