Application Engineer

• Serve as a primary liaison between the Cybersecurity and development teams, ensuring security is integrated into design, development, deployment, and operations.
• Conduct application security assessments, code reviews, API testing, threat modeling, and penetration testing to identify vulnerabilities.
• Define, maintain, and enforce secure coding standards, patterns, and best practices.
• Integrate and manage security tooling within CI/CD pipelines, including SAST, DAST, SCA, IaC scanning, and container security solutions.
• Support secure architecture reviews for cloud‑native applications, microservices, and containerized workloads.
• Support threat modeling, risk assessments, and security architecture reviews for applications.
• Ensure that all security practices meet regulatory and compliance requirements.
• Develop and deliver cybersecurity training programs for development teams to promote awareness and adherence to best practices.
• Ensure application security practices align with regulatory and compliance frameworks (e.g., NIST CSF, ISO 27001, IEC 62443).
• Keep up to date on emerging threats, incorporating threat intelligence into security practices and providing proactive defenses.
• Monitor and respond to application security threats, incidents and vulnerabilities.
• Stay up to date on regulatory developments and industry trends.
• Manage and maintain third-party vendor and consultant relationships.
• Perform other duties as assigned.

See all jobs on JobTailor

Application Security Engineer