Application Security Engineer (f/m/d)

Responsibilities

We are representing a confidential technology organization seeking an Application Security Engineer to establish and lead their AppSec program. You will serve as a trusted security advocate, working closely with engineering and product teams to build secure applications from the ground up.

In this role, you will:

• Secure the software development lifecycle by integrating security tooling such as SAST, DAST, and dependency scanning into CI/CD pipelines and IDEs, enabling teams to identify and remediate issues early.
• Conduct threat modelling and secure design reviews during the design phase, collaborating with product and engineering teams to identify security improvements before implementation.
• Provide code and architecture guidance through targeted reviews, helping developers implement secure coding practices and resolve vulnerabilities with actionable remediation support.
• Manage the vulnerability lifecycle by identifying, triaging, tracking, and reporting on vulnerabilities across internal and external applications. You will collaborate with engineers to close gaps efficiently, support bug bounty validation, and present management reports.
• Guide AI/ML and LLM security initiatives by providing secure development guidance for AI-powered features, managing risks like prompt injection and data leakage, and leading threat modelling for AI components.
• Support incident response efforts through investigation and root cause analysis of application-layer incidents, contributing to post-incident reviews and long-term mitigation strategies.
• Build security culture by acting as a champion for application security, owning and redesigning the security training program, creating a Security Champions program, and delivering workshops on secure development practices.
• Drive research and innovation by staying ahead of industry threats, proposing new ideas to reduce risk across the software supply chain, and showcasing how AI-powered tools can enhance security posture.

What We're Looking For

• 5+ years of experience in application security, product security, or related technical roles
• Direct experience working with software engineers and product managers to secure web applications
• Experience working within Agile environments
• Strong interpersonal skills with the ability to communicate clearly at all organizational levels
• Proven mentorship and training capabilities
• Ability to work effectively across departments with multiple stakeholders
• Coding proficiency in JavaScript, PHP, or Python
• Experience with cloud-native environments (AWS), containers, and Terraform
• Hands-on experience with DAST, SAST, and SCA tools, as well as reporting and dashboarding platforms
• Excellent spoken and written English

How We Work With You

Candidates apply directly through Get A Job.ai. Our recruiting team will screen your application and conduct an initial interview to understand your background and career goals. If there's a strong mutual fit, we will submit your profile to our client for consideration. Please do not contact the client directly—all communication and coordination will flow through our talent team to ensure the best experience for everyone involved.

Pay

Compensation details will be discussed during the screening process based on experience and qualifications.

Equal Employment Opportunity: Get A Job.ai is committed to inclusive hiring practices. We welcome candidates of all backgrounds, identities, and experiences. If you need any accommodations during the application or interview process, please let us know.