From A to B

Application Engineer

• Design and implement security tooling, automation, and processes to support secure development, deployment, and operations
• Perform threat modeling, design reviews, and security assessments (API, web, mobile, microservices)
• Conduct secure code reviews, dynamic and static application security testing, and penetration testing
• Work closely with engineering teams to remediate identified security issues, embed secure practices in SDLC, and strike the balance between speed and safety
• Investigate and respond to application-level security incidents or suspicious behavior
• Help define and enforce security standards, policies, and best practices across the engineering organization
• Maintain and improve application security infrastructure: e.g. vulnerability scanners, SAST/DAST tools, secrets management, dependency scanning, WAF configuration, RASP, etc.
• Stay abreast of new threats, vulnerabilities, and relevant industry practices; share knowledge (e.g. internal training, security guilds, writing blog posts)

Application Security Engineer