FREE ACCESS
5,000–10,000 jobs/day
See all jobs on JobTailor
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Application Security Engineer
Interact SoftwareApplication Security Engineer ensuring software security by building solutions instead of just monitoring. Involves threat modeling, vulnerability assessment, and working closely with engineering teams.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in application security principles and practices, with a strong focus on secure coding, vulnerability assessment, and incident response. Proficient in integrating security into CI/CD pipelines and collaborating with cross-functional teams to enhance security posture.
Highest-signal resume keywords
Application Security ExperienceVulnerability AssessmentCI/CD Security IntegrationCloud Security ExpertiseSecurity Testing Tools Proficiency
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Application Security PrinciplesSecure Coding PracticesVulnerability Exploitation and FixingThreat ModellingIncident ResponseCloud Security (AWS/Azure)Authentication Protocols (OAuth, SAML, JWT)Compliance Standards (GDPR, ISO 27001)Security Metrics ReportingDevSecOps Practices
Soft Skills
Excellent CommunicationProactive ThinkingCollaborative MindsetAttention to DetailResilience
Tools & Technologies
Burp SuiteOWASP ZAPFortifyCheckmarxSonarQubeOctopus DeployAzure DevOps
Certifications & Qualifications
OSCPOffensive Security Certifications
Industry Keywords
GDPRISO 27001SOC 2PCI DSSOWASP Top TenSANS/CWE Top 25
Tech Stack
Tools & technologiesAWSAzureCloudJavaScript.NETReactTypeScript
About the role
Key responsibilities & impact- Read and write real code. Review pull requests for security-relevant changes and contribute fixes directly rather than filing tickets and walking away.
- Manually assess applications and APIs — find, exploit, and prove real vulnerabilities, and distinguish genuine risks.
- Build secure building blocks: reviewing libraries, safe wrappers, auth patterns, and paved-road templates so the easy way is the secure way.
- Perform threat modelling and design reviews on new features, working from how the system actually behaves, not a checklist.
- Automate security into CI/CD (Octopus deploy/Azure DevOps).
- Fix vulnerabilities; When you find a bug, ask what pattern allowed it and eliminate the pattern.
- Support incident investigation and remediation for application security issues and get hands-on with logs, code, and root cause.
- Level up engineers through code, examples, and quarterly training.
- Help shape standards and priorities for the wider engineering teams (this is a small team; you'll have real influence, but the day job is engineering).
- Stay updated with the latest security threats, vulnerabilities, and industry trends to proactively address potential risks.
- Advocate for security best practices and influence engineering culture to prioritize security.
- Evaluate and adopt new security tools and technologies to enhance the security posture.
- Participate incident response efforts for application security incidents, including investigation and remediation.
- Collaborate with compliance teams to ensure applications meet regulatory and industry-specific security requirements (e.g., GDPR, ISO 27001).
- Implement and oversee security tools and technologies such as SAST, and DAST solutions.
- Facilitate security architecture reviews and threat modelling sessions for new and existing applications.
- Report on security metrics and KPIs to senior management, providing insights into the security posture and areas for improvement.
- Drive continuous improvement, fostering a culture of security awareness and proactive risk management.
- Coordinate with third-party vendors and security consultants as needed for specialised assessments or audits.
Requirements
What you’ll need- Strong software engineering background — you've written and shipped production code, ideally in .NET and/or TypeScript/React, and you can drop into an unfamiliar codebase and reason about it.
- Solid application security experience securing web apps and APIs.
- Demonstrated ability to find vulnerabilities manually and explain both the exploit and the fix.
- Comfortable integrating and, crucially, tuning security testing in CI/CD so the output is trustworthy.
- You've influenced engineers as a peer, through code and pragmatism.
- Certifications (Preferred): Offensive/practical certs like OSCP, or an equivalent
- Cloud security depth in AWS and/or Azure; container/orchestration security.
- Familiarity with GDPR, ISO 27001, SOC 2 as constraints to engineer around.
- Expert knowledge of application security principles, practices, and frameworks such as OWASP Top Ten, SANS/CWE Top 25.
- Proficiency with security testing tools like Burp Suite, OWASP ZAP, Fortify, Checkmarx, SonarQube or similar.
- Strong understanding of secure coding practices in languages and frameworks such as JavaScript, TypeScript, ReactJS, .NET, and others.
- Familiarity with DevSecOps practices and integrating security tools into CI/CD pipelines.
- Knowledge of authentication and authorization protocols such as OAuth, SAML, JWT, and multi-factor authentication.
- Understanding of cloud security principles and experience with cloud platforms like AWS and/or Azure.
- Experience with compliance standards and regulations like GDPR, ISO 27001, PCI DSS, and SOC 2.
- Knowledge of encryption standards, key management, and data protection strategies.
- Experience with incident response processes and security event management.
- Excellent communication skills, adept at conveying security concepts to both technical and non-technical stakeholders.
- High attention to detail with a commitment to maintaining the highest standards of security and quality.
- Proactive and strategic thinker, able to anticipate security challenges and stay ahead of emerging threats.
- Collaborative mindset, thriving in a cross-functional team environment and building strong relationships across departments.
- Passionate about security, with a continuous desire to learn and stay updated on the latest industry trends and threats.
- Resilient and adaptable, capable of handling high-pressure situations and making sound decisions during security incidents.
- Ethical and trustworthy, maintaining the highest level of integrity in handling sensitive information.
Benefits
Comp & perks- 🌐 Worldwide ❌ Jobs You've Hidden ⭐️ Saved Jobs ✅ Applied Jobs ✉️ Email Alerts 👤 Account Interact Software Website LinkedIn All Job Openings 201 - 500 employees 🏢 Enterprise ☁️ SaaS ⚡ Productivity Enterprise
- SaaS
- Productivity Interact Software is a leading provider of intranet solutions designed to enhance internal communications and employee engagement within organizations. Their platform offers a unified digital workspace that integrates communication, content management, and collaboration tools, empowering teams to work more effectively. With features such as AI-driven content personalization and mobile accessibility, Interact Software aims to transform the way businesses communicate and foster a connected workforce. Application Security Engineer Job not on LinkedIn 🔥 2 hours ago 🏢🏡 Manila – Hybrid ⏰ Full Time 🟡 Mid-level 🟠 Senior 💻 Application Engineer AWS Azure Cloud JavaScript React TypeScript .NET Apply Now Find Hiring Managers Customize resume + cover letter Report problem ☆ Save ☑️ Mark as applied ❌ Hide 📋 Description
- Read and write real code. Review pull requests for security-relevant changes and contribute fixes directly rather than filing tickets and walking away.
- Manually assess applications and APIs — find, exploit, and prove real vulnerabilities, and distinguish genuine risks.
- Build secure building blocks: reviewing libraries, safe wrappers, auth patterns, and paved-road templates so the easy way is the secure way.
- Perform threat modelling and design reviews on new features, working from how the system actually behaves, not a checklist.
- Automate security into CI/CD (Octopus deploy/Azure DevOps).
- Fix vulnerabilities; When you find a bug, ask what pattern allowed it and eliminate the pattern.
- Support incident investigation and remediation for application security issues and get hands-on with logs, code, and root cause.
- Level up engineers through code, examples, and quarterly training.
- Help shape standards and priorities for the wider engineering teams (this is a small team; you'll have real influence, but the day job is engineering).
- Stay updated with the latest security threats, vulnerabilities, and industry trends to proactively address potential risks.
- Advocate for security best practices and influence engineering culture to prioritize security.
- Evaluate and adopt new security tools and technologies to enhance the security posture.
- Participate incident response efforts for application security incidents, including investigation and remediation.
- Collaborate with compliance teams to ensure applications meet regulatory and industry-specific security requirements (e.g., GDPR, ISO 27001).
- Implement and oversee security tools and technologies such as SAST, and DAST solutions.
- Facilitate security architecture reviews and threat modelling sessions for new and existing applications.
- Report on security metrics and KPIs to senior management, providing insights into the security posture and areas for improvement.
- Drive continuous improvement, fostering a culture of security awareness and proactive risk management.
- Coordinate with third-party vendors and security consultants as needed for specialised assessments or audits. 🎯 Requirements
- Strong software engineering background — you've written and shipped production code, ideally in .NET and/or TypeScript/React, and you can drop into an unfamiliar codebase and reason about it.
- Solid application security experience securing web apps and APIs.
- Demonstrated ability to find vulnerabilities manually and explain both the exploit and the fix.
- Comfortable integrating and, crucially, tuning security testing in CI/CD so the output is trustworthy.
- You've influenced engineers as a peer, through code and pragmatism.
- Certifications (Preferred): Offensive/practical certs like OSCP, or an equivalent
- Cloud security depth in AWS and/or Azure; container/orchestration security.
- Familiarity with GDPR, ISO 27001, SOC 2 as constraints to engineer around.
- Expert knowledge of application security principles, practices, and frameworks such as OWASP Top Ten, SANS/CWE Top 25.
- Proficiency with security testing tools like Burp Suite, OWASP ZAP, Fortify, Checkmarx, SonarQube or similar.
- Strong understanding of secure coding practices in languages and frameworks such as JavaScript, TypeScript, ReactJS, .NET, and others.
- Familiarity with DevSecOps practices and integrating security tools into CI/CD pipelines.
- Knowledge of authentication and authorization protocols such as OAuth, SAML, JWT, and multi-factor authentication.
- Understanding of cloud security principles and experience with cloud platforms like AWS and/or Azure.
- Experience with compliance standards and regulations like GDPR, ISO 27001, PCI DSS, and SOC 2.
- Knowledge of encryption standards, key management, and data protection strategies.
- Experience with incident response processes and security event management.
- Excellent communication skills, adept at conveying security concepts to both technical and non-technical stakeholders.
- High attention to detail with a commitment to maintaining the highest standards of security and quality.
- Proactive and strategic thinker, able to anticipate security challenges and stay ahead of emerging threats.
- Collaborative mindset, thriving in a cross-functional team environment and building strong relationships across departments.
- Passionate about security, with a continuous desire to learn and stay updated on the latest industry trends and threats.
- Resilient and adaptable, capable of handling high-pressure situations and making sound decisions during security incidents.
- Ethical and trustworthy, maintaining the highest level of integrity in handling sensitive information. Apply Now 📊 Check your resume score for this job Improve your chances of getting an interview by checking your resume score before you apply. Check Resume Score Similar Jobs Application Support Engineer 🕒 April 12 Cubic³ 201 - 500 📡 Telecommunications ☁️ SaaS 🤝 B2B Website LinkedIn All Job Openings Application Support Engineer providing excellent technical support at Cubic³, dealing with application and system issues in a hybrid work environment. 🏢🏡 Manila – Hybrid 💰 $12.3M Venture Round - Cubic Telecom on 2020-01 ⏰ Full Time 🟡 Mid-level 🟠 Senior 💻 Application Engineer MS SQL Server SQL Applications Engineer 🕒 February 17 Emerson 10,000+ employees 🏢 Enterprise ⚡ Energy ☁️ SaaS Website LinkedIn All Job Openings Applications Engineer developing custom engineering solutions for NI products in semiconductor test industry. Collaborating with customers and teams to deliver large scale engineering solutions. 🏢🏡 Manila – Hybrid ⏰ Full Time 🟡 Mid-level 🟠 Senior 💻 Application Engineer DAC Java View More Application Engineer Jobs 🌐 Worldwide Built by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com Search Search Jobs by country Search jobs by city Search jobs by job title Search entry-level jobs Search junior-level jobs Search senior-level jobs Search jobs by tech stack Search jobs by contract type Search remote internships Search remote part-time jobs Remote jobs Anywhere in the World Companies Hiring Anywhere in the World Companies Hiring Sales People Anywhere in the World Companies Hiring Software Engineers Anywhere in the World Resources Advice Tips for finding remote jobs Interview questions and answers Resume examples Cover letter examples Post a job Affiliates Privacy policy Terms of service Job board SEO course AI Apply Copilot OpenClaw job finder Find jobs using your resume Jobs by Country Remote jobs anywhere in the world (Worldwide remote jobs) Remote jobs United States Remote jobs Australia Remote jobs Brazil Remote jobs Canada Remote jobs France Remote jobs Ireland Remote jobs Germany Remote jobs Netherlands Remote jobs Spain Remote jobs UK Popular Jobs Remote data analyst jobs Remote customer support jobs Remote executive assistant jobs Remote marketing jobs Remote product designer jobs Remote product manager jobs Remote project manager jobs Remote recruiter jobs Remote sales jobs Remote software engineer jobs Jobs by Type Remote full-time jobs Remote part-time jobs Remote contract jobs Remote internship jobs Remote entry-level jobs Remote jobs with no experience required Remote junior jobs (1-3 years of experience) Digital nomad jobs Remote jobs with no degree required Freelance remote jobs Temporary remote jobs Remote jobs hiring now Stay at home mom jobs