application security developer

Virtu Thinko

JOB DESCRIPTION Application Security EngineerDepartment:Technologies &ndash; InfrastructureReports to: Security Operations Manager1. Position SummaryThe Application Security Engineer is responsible for safeguarding the organization&rsquo;s application landscape by embedding security into every step of the software development lifecycle (SDLC). The role requires a deep understanding of application security principles, penetration testing, threat modelling, secure coding practices, and modern DevSecOps methodologies.The ideal candidate will work closely with development, project teams, and broader technology functions to proactively identify vulnerabilities, conduct in‑depth security assessments, and implement preventative controls. The role demands hands‑on experience with SAST/DAST tools, application penetration testing, API security, and the ability to integrate security controls within CI/CD pipelines.This position operates in a fast‑paced environment requiring strong technical expertise, excellent communication skills, and the ability to translate complex security findings into actionable remediation guidance. The successful candidate will play a critical role in maturing the organization&rsquo;s application security posture and ensuring compliance with industry best practices and global security standards.Responsibilities:&middot; Integrate security into all phases of the SDLC by collaborating with development, QA, project, and architecture teams.&middot; Conduct comprehensive application security assessments, including manual and automated code reviews, DAST/SAST analysis, and penetration testing for web, mobile, and API-based applications.&middot; Perform design and architecture reviews, including threat modelling using frameworks such as STRIDE and PASTA.&middot; Identify vulnerabilities and provide remediation guidance aligned with secure coding standards and frameworks such as OWASP Top 10, OWASP ASVS, NIST 800‑115, and CWE.&middot; Develop and maintain application security policies, secure coding guidelines, and best practice references.&middot; Support integration of security tooling into CI/CD pipelines.&middot; Review and improve security processes, focusing on optimization and automation opportunities.&middot; Conduct cloud and infrastructure penetration tests when required, in coordination with infrastructure teams.&middot; Manage and validate vulnerability findings using enterprise vulnerability management systems.&middot; Assist development teams in debugging and resolving security vulnerabilities, ensuring timely remediation.&middot; Participate in incident response activities related to application-layer attacks.&middot; Maintain up‑to‑date knowledge of emerging threats, exploit techniques, and evolving security technologies.&middot; Provide clear technical documentation, reports, and executive summaries of assessment results.&middot; Support internal audits, compliance requirements, and risk assessments related to application security.&middot; Promote secure-by-design principles and contribute to the organization&rsquo;s DevSecOps strategy.&middot; Ensure full compliance with Information Security and Assurance policies, industry standards, and applicable regulatory requirements by embedding governance and controls across the application lifecycle.&middot; Develop, maintain, and enforce application and system hardening baselines aligned with CIS Benchmarks and other security configuration standards.&middot; Participate in 24&times;7 support during critical application security incidents, investigations, and urgent remediation activities as required.&middot; Contribute to security-related initiatives and projects, performing additional duties as assigned to support evolving business and technology needs within the security program.Required Experience &middot; 5-7 years of professional experience in application security, penetration testing, or related security engineering roles.&middot; Demonstrated hands‑on experience in application penetration testing using tools such as Burp Suite, OWASP ZAP, and related exploitation frameworks.&middot; Strong knowledge of OWASP Top 10, OWASP ASVS, OWASP SAMM, and secure SDLC frameworks.&middot; Experience performing threat modelling and reviewing application architecture designs.&middot; Hands‑on expertise with SAST/DAST tools and integrating them into CI/CD workflows.&middot; Working knowledge of vulnerability management process and tools.&middot; Practical experience reviewing code in languages such as JavaScript, TypeScript, Java, or similar.&middot; Good understanding of microservices, REST APIs, authentication/authorization mechanisms, and modern application frameworks.&middot; Basic scripting proficiency (Python, Bash, or PowerShell).&middot; Familiarity with container security, cloud-native security concepts, and DevSecOps practices.&middot; Understanding of networking, TCP/IP fundamentals, and common attack vectors.Education:&middot; BSc/BA in Computer Science, Cybersecurity, Information Technology, or equivalent professional experience.Industry Qualifications: &middot; OSWE, OSCP, OSWA, GPEN, GWAPT, GCPN, or similar security certifications.&middot; Certifications in secure coding, cloud security, or application security standards.&middot; DevSecOps‑related certifications are an advantage.Key Behaviours / Competencies&middot; Strong analytical and problem‑solving skills with attention to detail.&middot; Ability to work independently, prioritize workload, and meet defined deadlines.&middot; Excellent communication skills, with the ability to explain technical vulnerabilities to non‑technical stakeholders.&middot; Demonstrated ability to operate effectively in high‑pressure environments.&middot; A mindset focused on continuous improvement, innovation, and automation.&middot; Strong collaboration and teamwork skills across multidisciplinary teams.&middot; Ability to evaluate applications from both attack and defense perspectives.&middot; Demonstrate a customer‑first mindset by enabling secure, frictionless digital experiences.&middot; Balance security requirements with business needs to support secure innovation.&middot; Provide clear, empathetic, and actionable guidance to internal stakeholders.&middot; Ensure security processes support transparency, agility, and minimal disruption to delivery teams.5. Primary Contactso Information Security Teamo Development Leads / Testing Teamso Project Managerso Security Operations Center (SOC)o Architecture &amp; Governance Teamo Internal and External AuditorsJob Types: Temporary, Contract Contract length: 12 monthsPay: BD1,000.000 - BD1,500.000 per month

Application Security Engineer

البنك التجاري الدولي

<div></div><div><div>Description<div></div> 
JOB PURPOSE: 
To deploy, operate, ensure and maintain the appropriate application and software security solutions, controls and tools within the overall bank&rsquo;s approved security architecture framework and according to bank&rsquo;s information security policies, procedures and guidelines.
Description 
1.Monitor, Define, Implement and operate the enterprise applications security platforms, Public Key Infrastructure (PKI), and assist in fixing the vulnerabilities / gaps identified from security scanning tools and services in order to provide the required assurance that corporate applications and published services are up and running in a secured way according to bank&rsquo;s information security policies. 
2.Run static code scanning tools and perform manual code inspection in alignment with IT Development team, while providing Information Security Compliance team with a clean report to provide assurance that secure code practices are being followed. 
3.Provide the required level of support for all managed systems and applications from application security perspective, acting as a focal point between Information Security Compliance team and the remaining IT stakeholders for any required security assessments. in order to maintain business operations and security controls according to approved service level agreement and information security standards. 
4.Participate in dynamic code scanning, application security design reviews and penetration testing of internal web applications and external partner applications to mitigate the identified vulnerabilities and security defects. 
5.Supports the implementation and enforcement of technical security measures on the application level according to policies, standards, and patterns of Information Security, in order to be fully aligned with corporate approved Secure Software Development Lifecycle. 
6.Participate in security architecture reviews for different applications as part of the BRD, Projects and SDLC process lifecycle to ensure effective security controls over enterprise applications as well as mitigation of reported vulnerabilities as security defects. 
7.Serves as a Subject Matter Expert (SME) in web application security for enterprise projects during development phases to provide security consulting and recommendations and assist in implementing and fine-tuning the different security controls in alignment with the business applications&rsquo; functionalities such as the Web Application Firewall (WAF) and the Next Generation Firewalls&rsquo; (NGFW) policies and access lists. 
8.Perform security functional testing as needed and validate pen-test findings, in order to provide information security by the required levels of assurance that identified security gaps and vulnerabilities have been mitigated as planned. 
9.Ensure proper configuration and functionality of the managed solutions and coordinate with support vendors for resolving issues impacting solutions&rsquo; availability, in order to keep solution with full compliance of current environment architectural and incident response requirements. 
10.Ensure that all implemented projects meet application security best practice, and guidelines, including but not limited to integration of third party security products within the current infrastructure, in order to ensure solution proper implementation and operation. 
11.Produce regular monthly KPIs, application security reports and dashboards for incidents identified on managed platforms, actions taken and mitigations applied for further reporting in order to be represented to the respective stakeholders/committees as needed. 
12.Support and Assist security related infrastructure/information Security teams in the estimation of implementation project time and materials, testing and evaluation of new technologies and security controls, in order to effectively optimize organization resources. 
13.Provide project management support by facilitating demonstrations of vendor partner products, reviewing and co-authoring statements of work, evaluation support for product demos, in order to ensure effective engagement towards business objectives. 
14.Ensure that application security tools and technologies are deployed in the current environment in line with architectural requirements with the appropriate levels of application security controls and systems monitoring at all levels, in order to ensure effective controls according to business/compliance/regulation requirements. 
Policies, Processes and Procedures 
15.Follow all relevant department policies, processes, standard operating procedures and instructions so that work is carried out in a controlled and consistent manner. 
Day-to-day operations 
16.Follow the day-to-day operations related to own jobs in the IT Security, Control &amp; Quality Assurance department to ensure continuity of work. 
Compliance 
17.Comply with all relevant CBE regulations, banking laws, AML regulations and internal CIB policies and code of conduct in order to maintain CIB&rsquo;s sound legal position and mitigate any potential risks. 

</div><div></div><div>Qualifications<div></div> 
QUALIFICATIONS, EXPERIENCE, &amp; SKILLS 
 Bachelor&rsquo;s degree of Engineering, Computer Science or equivalent. 
 Senior Engineer: Minimum of 6 &ndash; 8 years of experience in IT Security and related disciplines. 
 Experience in use of various commercial and open source penetration testing tools and methodologies and performing penetration testing of web applications and operating systems. 
 Experience in identifying and remediating common web application vulnerabilities such as OWASP Top 10. 
 Familiarity with APT attack and kill chains. 
 Experience with enterprise security architecture and software such as Web Applications Firewalls, Next Generation Firewalls, email sandboxing, etc 
 Experience in configuring and implementing technical security solutions, application security platforms, sandboxing, and similar technologies. 
 Good written and verbal communication skills 
 Self-motivated, Problem Solving Skills, Detail oriented 
 Proven analytical and problem-solving abilities 
 Ability to effectively prioritize and execute tasks in a high-pressure environment 
 Experience working in a team-oriented, collaborative environment 
 Good command of English language. 
Recommended Certifications 
 Microsoft Certified Systems Administrator: Security 
 GIAC Information Security Fundamentals 
 CCNP Security<div> 
</div></div><div>
Primary Location: Egypt-Giza-SMART VILLAGE BLDG. 1</div><div>
Work Locations: B219 - Financial District, Smart Village, Cairo - Alex Desert Road</div><div>
Job: Back Office</div><div>
Organization: FINANCE, STRATEGY, OPERATIONS &amp; TECHNOLOGY</div><div>
Shift: Day Job</div><div>
Job Type: Full-time Employee</div></div>

APPLICATION SECURITY ENGINEER

Tyler Technologies

<div>The Application Security Analyst plays a crucial role in safeguarding the integrity and security of Tyler&rsquo;s applications by being accountable for configuring, conducting, and auditing application security scans and tooling tailored to Tyler&rsquo;s products. This position requires a collaborative approach, working closely with development teams to triage vulnerabilities and inefficiencies identified in security scans. The overarching objective of the application security analyst is to enhance Tyler&rsquo;s application security posture while mitigating enterprise-wide risks associated with software vulnerabilities.
Please note: We are not considering candidates who require visa sponsorship for this position. This is a budgetary decision and due to the significant talent available currently who do not require such sponsorship. 
 
Responsibilities<ul><li>
DAST scan onboarding, scan troubleshooting, and optimization.</li><li>
Serve as the first point of contact for the vulnerability disclosure program and coordinate fixes with the responsible teams.</li><li>
Execute project plans and maintain the scope, schedule, and each party&rsquo;s responsibilities.</li><li>
Assist in maintaining a list of Tyler products and their key attributes.</li><li>
Assist in implementing improvements to current Application Security program technologies and processes.</li><li>
Assist divisions in implementing regular automated security testing as part of their software development lifecycle.</li><li>
Stay updated on the latest threats, vulnerabilities, and security technologies through ongoing education and research, ensuring that the application security program evolves to meet emerging challenges</li><li>
Help execute projects to increase Tyler&rsquo;s overall security posture.</li></ul>
Qualifications<ul><li>
Bachelor&rsquo;s degree in information technology, computer science, information assurance, or related field, or comparable work experience.</li><li>
Experience with scripting PowerShell and/or Python (or other scripting languages).</li><li>
Experience with HTTP Protocol.</li><li>
Software administration experience required.</li><li>
Two to four years&rsquo; experience with Tyler products or similar products.</li><li>
Ability to prioritize and complete multiple tasks in a fast-paced, technical environment.</li><li>
Demonstrated ability to maintain a positive, professional attitude.</li><li>
Excellent interpersonal and communication skills, as well as good listening skills.</li><li>
Strong negotiation, conflict resolution, and persuasion skills.</li></ul></div>

Application Security Analyst

Oasys

<div><div>Who We Are: Oasys International LLC (Oasys) is a fast-growing federal government contractor delivering high-quality technology consulting and professional services to civilian, defense, and homeland security agencies. We have been recognized on Inc. 5000&rsquo;s list of the fastest-growing companies in America for five consecutive years and named a Best Places to Work in Virginia for the past two years.</div><div></div><div> 
Our success is driven by a talented team of technologists, consultants, engineers, and subject-matter experts who support complex federal missions with integrity and excellence. At Oasys, we foster a collaborative, merit-based culture that values continuous learning, professional growth, and work-life balance. We are committed to creating an inclusive, engaging environment where employees are recognized for their contributions and empowered to build meaningful, long-term careers.</div><div></div><div> 
Position Summary:</div><div>
The Application Security Engineer position supports secure application development and cybersecurity operations for Federal DoD programs. The role requires a deep expertise in application security, software development, federal cybersecurity standards, and secure architecture. Will be responsible for senior-level leadership in information security, secure SDLC integration, and compliance with federal security frameworks such as NIST 800‑53, NIST 800‑37 RMF, FedRAMP, and agency-specific security baselines.</div><div></div><div> 
NOTE: This role is contingent on the contract being awarded.</div><div></div><div> 
Primary Responsibilities:</div><div><ul><li>
Serve as the primary application security SME for the project, ensuring compliance with NIST, FISMA, FedRAMP, DHS, DoD, and agency-specific security requirements.</li><li>
Guide system teams through Risk Management Framework (RMF) steps related to application security, including control implementation, evidence gathering, and POA&amp;M mitigation.</li><li>
Lead security architecture reviews for mission-critical systems, ensuring secure-by-design principles across federal systems and networks.</li><li>
Integrate security into the federal SDLC by defining secure coding standards, conducting code reviews, and providing architectural input.</li><li>
Conduct and lead advanced security testing.</li><li>
Provide CISSP-level expertise on risk evaluation, compensating controls, and secure architecture guidance.</li><li>
Guide enterprise risk posture by advising leadership on vulnerabilities, mitigations, and long-term remediation planning.</li><li>
Ensure secure configurations of cloud resources within AWS GovCloud FedRAMP environments.</li><li>
All other duties as assigned by management.</li></ul></div><div></div><div> 
Skills and Qualifications:</div><div><ul><li>
Bachelor&rsquo;s degree in computer science or related field</li><li>
10 years in application development and IT security</li><li>
Experience performing risk assessments for Federal systems in AWS GovCloud</li><li>
Experience supporting FedRAMP High/Moderate systems</li><li>
Knowledge in Java, Python, HTML, SQL, CSS and cloud computing</li><li>
Excellent communication and management skills.</li></ul></div><div></div><div> 
Certifications Required:</div><div><ul><li>
Certified Secure Software Lifecycle Professional (CSSLP)</li><li>
Certified Information Systems Security Professional (CISSP)</li><li>
CompTIA Security +</li></ul></div><div></div><div> 
Certifications Preferred:</div><div><ul><li>
Certified Ethical Hacker (CEH)</li></ul></div><div></div><div> 
Security Clearance Requirements:</div><div><ul><li>
Must be a U.S. Citizen</li><li>
Must have an active DoD Secret clearance.</li></ul></div><div></div><div> 
Work Location:</div><div><ul><li>
Fairfax, VA &ndash; Corporate Headquarters (Hybrid)</li></ul></div><div></div><div> 
Oasys is proud to be an equal opportunity employer for all protected groups, including protected veterans and individuals with disabilities.</div></div>

Train With Ellie

<div>About Owner.com
Owner is the AI growth system for local restaurants. 
Our AI continuously improves SEO, marketing, and online ordering to grow first-party orders. Unlike other companies that force small business owners to master their software to drive sales, Owner gives them a proven system run by experts. 
Owner is like having an army of engineers and marketers on your side, just like the big chains. 
Our vision
We&rsquo;re starting by helping independent restaurants succeed online. 
But it&rsquo;s not just restaurants that need our help. Most local businesses are struggling with these same problems. Huge technology corporations are taking their customers, bleeding their profits, and making it hard for them to survive. 
Once we nail the solution for restaurants &ndash; we&rsquo;ll scale it into every other local business type. 
In the future we envision, tens of millions of local business owners will use our technology to succeed in the digital age. 
Read our Series C memo here 
Our traction
Since 2020, we've generated tens of millions in revenue and processed over half a billion dollars of online orders. 1 in 5 Americans have used an Owner.com website. 
More importantly, we&rsquo;ve helped over 20,000 restaurant owners, and saved them nearly $200 million in fees. 
Our team
Our team is now in the low hundreds. We&rsquo;ve got top talent from the most successful companies in SMB software, including: Shopify, HubSpot, DoorDash, ServiceTitan, Rappi, Faire and Stripe. 
We&rsquo;ll be scaling even faster in 2026 to keep pace with our customer growth. 
Where we work
Owner is a remote-first, global company headquartered in San Francisco, with a sales hub in Toronto. For a few of our roles we prioritize in-person collaboration at one of our office locations. Most of our teammates are distributed throughout the globe. Please review the role description and discuss with your recruiter for more details on location! 
Why we&rsquo;re looking for you
We are seeking a highly skilled Application Security Engineer (AppSec Engineer). The AppSec Engineer will partner with engineering teams to conduct application security testing, remediation, and prevention across our entire product line. This role is critical to protecting and advancing Owner&rsquo;s mission.
This role is 100% remote and can be based anywhere in the United States or Canada, as well as Mexico or Colombia.
The impact you will have<ul><li>
Secure Owner&rsquo;s product line.</li><li>
Enable teams to move fast without exposing Owner to unnecessary risk.</li><li>
Protect our customers by helping prevent fraud and abuse across our products.</li><li>
Make Owner&rsquo;s development process more secure, efficient, and enjoyable.</li></ul>
Who you&rsquo;ll work with<ul><li>
This role has company-wide impact and works cross-functionally across the organization, including:</li><li>
Engineering teams</li><li>
Customer Support teams</li></ul>
What we&rsquo;re looking for<ul><li>
Exceptional application security testing capabilities.</li><li>
Conduct penetration testing for all applications, both existing and new developments.</li><li>
Perform on-demand security testing for new and existing applications.</li><li>
Conduct security code reviews in partner engineering teams and product teams.</li><li>
Experience working with and testing startups in this capacity.</li><li>
Triage reported vulnerabilities.</li><li>
Bonus: Background in bug bounty programs and exploit development.</li><li>
Experience writing feature-level, production-quality code using an object-oriented programming language.</li><li>
Flexible, pragmatic problem-solving approach.</li><li>
Strong written and verbal communication skills.</li><li>
Deep sense of personal ownership and accountability.</li><li>
Builder mentality.</li><li>
Nice to Haves</li><li>
Experience with B2C business models and their associated security considerations.</li><li>
Experience with application-level alerting and detection.</li><li>
Experience detecting and preventing fraud and abuse.</li><li>
Experience with payment or financial security.</li></ul>
Pay and benefits<ul><li>
The estimated base salary for this role is in the local equivalent of $190,000 to $220,000 USD</li><li>
Other benefits include comprehensive health coverage, remote-first work environment, unlimited PTO - plus extra fun perks!</li></ul> 
 Notice - Employment Scams
Communication from our team regarding job opportunities will only be made by an Owner team member with an @owner.com email address.
We do not conduct interviews over email or chat platforms, and we will never ask you to provide personal or financial information such as your mailing address, social security number, credit card numbers or banking information. If you believe you are being contacted by scammer, please mark the communication as &quot;phishing&quot; or &ldquo;spam&rdquo; and do not respond.</div><div></div>

Search 10000+ Application security developer jobs near you this March. New roles added regularly across leading industries. Apply today.

10000 application security developer jobs Near Me

Application Security Engineer

APPLICATION SECURITY ENGINEER

Application Security Analyst

Application Security Engineer

Application Security Analyst

Application Security Engineer

Application Security Analyst