FREE ACCESS
5,000–10,000 jobs/day

See all jobs on JobTailor
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.

AppSec Engineer
Paramo TechnologiesAppSec Engineer ensuring security in software development lifecycle. Involved in vulnerability management and secure software development for e-commerce company.
Tech Stack
Tools & technologiesCyber SecurityVault
About the role
Key responsibilities & impact- Manage and operate application security and code vulnerability tools (e.g., SAST, DAST, dependency scanning, container security).
- Identify, analyze, and validate vulnerabilities discovered in source code, applications, containers, and external attack surface.
- Support and oversee vulnerability discovery activities, including:
- o Automated scanning tools
- o Bug bounty findings
- o Manual testing results (where applicable)
- Coordinate and support vulnerability remediation with development teams.
- Manage and improve the Secure Software Development Lifecycle (SSDLC).
- Review and manage the handling of secrets and sensitive data using tools such as HashiCorp Vault.
- Perform security reviews of external libraries, dependencies, and supply chain components.
- Support security testing tools such as OWASP ZAP, Acunetix, Burp Suite, SonarQube, Outpost24 EASM, and container scanning solutions.
- Correlate findings from multiple security tools and prioritize remediation based on risk.
- Ensure vulnerabilities are properly tracked, documented, and managed through Jira tickets.
- Validate that remediation actions are correctly implemented before closing tickets.
- Contribute to defining security standards, guidelines, and best practices for developers.
- Document new procedures or update existing ones related to application and development security.
- Ensure documentation is accurate, comprehensive, and delivered on time.
- Collaborate with SOC, IAM, and SIEM engineers when vulnerabilities or incidents overlap domains.
- Create reports and metrics related to vulnerabilities, remediation status, and SSDLC effectiveness.
- Engage in ongoing training and professional development to stay current with emerging threats, vulnerabilities, and secure development practices.
- Share knowledge and expertise with development and security teams to foster a culture of secure-by-design development.
- Adhere to the organization's different policies.
- Keep your work organized and traceable through tickets (Jira).
Requirements
What you’ll need- Five years of a university degree or a four-year college diploma, preferably in computer science, telecommunications, or other related academic fields, or equivalent work experience, are required.
- At least 2 years of work experience in application security, DevSecOps, or similar roles.
- Hands-on experience identifying and managing code and application vulnerabilities.
- Experience working with vulnerability scanning tools for:
- o Source code
- o Web applications
- o Containers and dependencies
- Understanding of the Secure Software Development Lifecycle (SSDLC).
- Experience collaborating with development teams on vulnerability remediation.
- Familiarity with secrets management and secure configuration practices.
- Strong analytical and problem-solving skills.
- Ability to work independently and as part of the Information Security Team under minimal supervision.
- Eager to learn and continuously improve security practices.
- Good documentation and reporting skills.
- Technical skills:
- o Solid foundations in networking, application architectures, and cybersecurity.
- o Ability to understand application flows, APIs, and common vulnerability patterns.
Benefits
Comp & perks- 22 days of annual leave.
- 10 days of national holidays.
- Health Insurance options.
- Access to e-learning platforms.
- Possibility of on-site English classes in some countries, and more.
ATS Keywords
✓ Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
application securitycode vulnerability managementvulnerability scanningSecure Software Development Lifecycle (SSDLC)secrets managementnetworkingapplication architecturescybersecurityAPI understandingvulnerability patterns
Soft Skills
analytical skillsproblem-solving skillsindependent workcollaborationdocumentation skillsreporting skillseagerness to learncontinuous improvement