Application Security Engineer AppSec

Overview

Secure BJAK’s web applications, APIs, and backend services while coordinating with mobile stakeholders on cross-platform risks. Embed application security across design, development, testing, and release workflows.

What you'll do

• Perform security reviews, code reviews, and testing for web applications, APIs, and backend services.
• Identify, prioritize, and help remediate application vulnerabilities.
• Integrate SAST, DAST, software composition analysis, and secrets scanning into CI/CD pipelines.
• Conduct threat modeling and design reviews for features, APIs, integrations, and major changes.
• Coordinate with mobile engineers on cross-platform findings and backend controls.
• Own application security implementation for SC TRM and BNM RMiT requirements.
• Provide secure coding guidance, track remediation, retest fixes, and improve developer security awareness.

What you'll need

• 3+ years of experience in application security, penetration testing, or secure software development.
• Degree in Computer Science, Cybersecurity, or a related discipline, or equivalent experience.
• Experience implementing SC TRM and BNM RMiT application security and secure SDLC requirements.
• Strong understanding of OWASP Top 10, OWASP API Security Top 10, web vulnerabilities, API security, and secure design.
• Hands-on experience with Burp Suite, OWASP ZAP, SAST, DAST, and dependency scanning tools.
• Experience reviewing TypeScript/Node.js and Python services.
• Strong English communication and collaboration skills.

Nice to have

• Familiarity with Swift, Kotlin, AWS, and GCP.

Details

• Location: Global.