Application Security Engineer

JOB SUMMARY

The Application Security Engineer is responsible for assessing the security of new applications and systems, conducting security assessments, and collaborating with the research and development team to implement a robust security framework. The role ensures that all applications deployed meet global security standards, protecting the company from potential threats.
The Application Security Engineer is accountable for maintaining the security of all applications and systems deployed within the company. This includes identifying and addressing vulnerabilities, implementing security solutions, and ensuring compliance
with global security standards.

DUTIES AND RESPONSIBILITIES

• Security Risk Assessments: Conduct security risk and threat assessments for new applications and systems.
  
• Vulnerability Testing: Run vulnerability scans, penetration testing, and exploit code execution to identify potential risks.
  
• Security Remediation: Recommend and implement technical solutions to address vulnerabilities identified during assessments.
  
• Security Framework Development: Collaborate with the development team to integrate security protocols within the software development lifecycle (SDLC)
  
• Documentation & Reporting: Maintain updated records of security vulnerabilities and remediation actions.
  
• Training: Conduct information security training to educate users on protecting company data against potential threats.
  
• Adhere to quality and compliance standards as part of our Information Security Management System. This includes following documented processes, participating in continuous improvement, and maintaining accurate records.  Each team member is responsible for supporting a safe, efficient, and customer-focused work environment.
  

Requirements

•  Bachelor’s degree in Computer Science, Engineering, or related field.
  
• 5 years in IT, with 2 years in information security, focusing on IT governance, network, or application security.
  
• Problem-solving mindset, project management, product and software development lifecycles, leadership, and experience in banking and digital transformation.
  
• Knowledge of advanced business planning, regulatory issues, and technology trends.
  
• Technical
  

• Vulnerability Management: Expertise in conducting security assessments, running vulnerability scans, and addressing identified risks.
  
• Penetration Testing: Proficient in performing penetration tests and executing exploit code to identify potential vulnerabilities.
  
• Security Framework Implementation: Strong capability in integrating security protocols into the software development lifecycle (SDLC).
  
• Security Tools: Knowledge of SAST (Static Application Security Testing) and other security tools to detect and remediate vulnerabilities.
  

• Behavioral
  

• Problem-Solving: Analytical and proactive in addressing security issues and vulnerabilities.
  
• Communication: Effective in liaising with development teams and stakeholders to ensure security compliance.
  
• Attention to Detail: High level of accuracy in identifying and addressing security flaws and maintaining security documentation.
  
• Collaboration: Ability to work with cross-functional teams to implement security best practices.