application security engineer

Lucidya

<div><h3 class="jobSectionHeader"><b>About Lucidya</b></h3><p>
Lucidya is an AI-native Customer Experience Intelligence platform enabling enterprises to understand, engage, and retain customers at scale. As Lucidya continues to scale globally, building secure-by-design products is a top priority. Security is a core pillar of our engineering strategy, and we are investing heavily in strengthening our application security posture across all products and platforms.</p><p>
To support this growth, we are looking for an Application Security Engineer to help drive secure development practices, proactively identify vulnerabilities, and embed security across the software development lifecycle.</p><h3 class="jobSectionHeader"><b>
About the Role</b></h3><p>
This is the first dedicated Application Security role at Lucidya, making it a high-impact and foundational position. You will play a critical role in shaping Lucidya&rsquo;s application security strategy, working closely with engineering teams to identify risks, close security gaps, and ensure our applications are secure by design.</p><p>
You&rsquo;ll operate at the intersection of security engineering, software development, and cloud infrastructure, thinking like an attacker while enabling developers to build secure, scalable systems.</p><h3 class="jobSectionHeader"><b>
What You&rsquo;ll Be Doing</b></h3><p><b>
Core Responsibilities</b></p><ul>
<li>
Develop and implement automated security testing and vulnerability detection workflows integrated into the Software Development Lifecycle (SDLC).</li>
<li>Conduct security reviews of web applications, mobile applications, APIs, and cloud environments (public and private).</li>
<li>Perform penetration testing on web, mobile, API, and desktop applications, as well as supporting infrastructure.</li>
<li>Evaluate application defenses, identify architectural and design-level security gaps, and recommend mitigation strategies.</li>
<li>Think like an attacker to proactively identify vulnerabilities and complex security risks before they reach production.</li>
<li>Collaborate closely with engineering teams to support secure coding practices and security-aware development.</li>
<li>Conduct code reviews with a security focus, especially for critical services and deployments.</li>
<li>Research emerging threats and contribute to the development or adoption of new security tools and techniques.</li>
</ul><p><b>
Day-to-Day Responsibilities</b></p><ul>
<li>
Review application code and architecture from a security perspective.</li>
<li>Support and guide teams on secure development lifecycle (SDLC) practices.</li>
<li>Work closely with developers during feature development and releases to ensure security controls are in place.</li>
<li>Participate in threat modeling, vulnerability triage, and remediation tracking.</li>
<li>Contribute to defining and evolving Lucidya&rsquo;s application security strategy.</li>
</ul><h3 class="jobSectionHeader"><b>Success Metrics</b></h3><ul>
<li>Measurable reduction in application vulnerabilities, including findings from external security assessments.</li>
<li>Clean and secure application releases with minimal critical or high-risk findings.</li>
<li>Successful integration of security practices across SDLC pipelines.</li>
<li>Improved security posture and readiness as validated by internal and external reviews.</li>
</ul><h3 class="jobSectionHeader"><b>First 90 Days</b></h3><ul>
<li>Gain a deep understanding of Lucidya&rsquo;s system architecture, codebase, and security landscape.</li>
<li>Identify key security gaps and prioritize remediation plans.</li>
<li>Begin embedding security workflows into CI/CD and development processes.</li>
<li>Establish trust and working relationships with engineering teams.</li>
</ul><p><b>
Requirements</b></p><h3 class="jobSectionHeader"><b>
What We&rsquo;re Looking For</b></h3><p><b>
Experience &amp; Background</b></p><ul>
<li>
2-4 years of experience in application security, security engineering, or a related role.</li>
<li>Background as a software engineer transitioning into security is highly valued.</li>
<li>Hands-on experience securing applications built with Ruby on Rails and React.</li>
<li>Experience performing penetration testing on modern web applications and APIs.</li>
</ul><p><b>
Technical &amp; Security Skills</b></p><ul>
<li>
Strong understanding of the Secure Development Life Cycle (SDLC).</li>
<li>Hands-on penetration testing experience (web, mobile, APIs).</li>
<li>Cloud security experience with AWS and/or GCP.</li>
<li>Ability to assess application architecture and identify design-level risks.</li>
</ul><p><b>
Certifications (Preferred / Non-Negotiable)</b></p><ul>
<li>
CISM</li>
<li>OSCP</li>
<li>SANS GIAC</li>
</ul><p><b>
Soft Skills</b></p><ul>
<li>
Strong communication skills and ability to work cross-functionally.</li>
<li>Comfortable engaging with developers, engineers, and stakeholders.</li>
<li>Proactive, ownership-driven mindset in a fast-growing environment.</li>
</ul><p><b>
Nice-to-Have</b></p><ul>
<li>
Experience working in SaaS or AI-driven products.</li>
<li>Exposure to building security functions from scratch.</li>
<li>Prior experience with security tooling development or automation.</li>
</ul><h3 class="jobSectionHeader"><b>Hiring Process</b></h3><ul>
<li>Screening Interview &ndash; Esraa Adel, Talent Acquisition Partner</li>
<li>First Technical Interview &ndash; Mostafa Asaad, Technology Manager</li>
<li>Technical Task</li>
<li>Second Interview</li></ul></div>

Application Security Engineer

inDriver

<div><div><div>We are looking for an Application Security Engineer in the AppSec team.</div><div>
AppSec provide the following services: Consulting development teams on security issues, Security audit of service architecture, Security audit of service implementation, Automatic search for vulnerabilities using SCA, SAST, DAST, secret scan tools, Support of the Bug Bounty program, Conducting awareness events: Secure development course, phishing simulations, Capture The Flag competitions</div></div></div>
<br><div><div><div><div><div><h2 class="jobSectionHeader"><b>Key Responsibilities</b></h2>
<ul><li>Conducting web application audits</li><li>
Processing the results of automatic scans of source code (secrets, vulnerable dependencies, SAST, DAST)</li><li>
Interaction with development teams to fix vulnerabilities</li><li>
Conducting awareness activities</li><li>
Reproducing vulnerabilities obtained from the BugBounty platform, creating regress tests</li></ul><div></div><h2 class="jobSectionHeader"><b><br>
Skills, Knowledge and Expertise</b></h2>
<ul><li>Having a higher education in IT, ideally information security</li><li>
Knowledge of at least one high-level programming language, ideally Golang</li><li>
Experience in IT from 1 year</li><li>
Basic skills in working with operating systems and databases</li><li>
Basic understanding of OWASP Top 10 vulnerabilities</li><li>
Ability to learn quickly</li></ul><div></div><h2 class="jobSectionHeader"><b><br>
Conditions &amp; Benefits</b></h2>
<ul><li>Stable salary, official employment</li><li>
Health insurance</li><li>
Hybrid work mode and flexile schedule</li><li>
Relocation package offered for candidates from other regions</li><li>
Access to professional counseling services including psychological, financial, and legal support</li><li>
Discount club membership</li><li>
Diverse internal training programs</li><li>
Partially or fully payed additional training courses</li><li>
All necessary work equipment</li></ul></div></div></div></div></div><div></div>

Senior Application Security Engineer

DeepSource Technologies

Role Overview
<br>The Database & Application Security Engineer is responsible for protecting enterprise databases and applications through activity monitoring, data masking, file integrity monitoring, and compliance reporting, ensuring confidentiality, integrity, and regulatory compliance.
<br><br>
Key Responsibilities
<br><ul>
<li>Monitor database activity to detect suspicious queries, unauthorized access, and privilege escalations.</li>
<li>Configure, validate, and maintain data masking policies for non-production and test environments.</li>
<li>Implement and manage File Integrity Monitoring (FIM) for critical database and system files using Tripwire.</li>
<li>Investigate database-related security incidents and support remediation efforts.</li>
<li>Generate compliance and audit reports aligned with PCI DSS, GDPR, and NCA frameworks.</li>
<li>Deliver monthly reports on database security posture, risks, and compliance status.</li>
<li>Collaborate with application, infrastructure, and compliance teams to enhance data protection controls</li>
</ul>
<b>Requirements:</b><br>
<ul>
<li>5+ years of experience in database and application security.</li>
<li>Hands-on experience with Imperva DAM, OpenText Data Masking, and Tripwire FIM (or equivalent tools).</li>
<li>Strong understanding of database technologies (Oracle, SQL Server, MySQL, etc.).</li>
<li>Knowledge of regulatory and compliance frameworks (PCI DSS, GDPR, NCA).</li>
<li>Experience in security monitoring, alert tuning, and reporting.</li>
<li>Strong analytical and documentation skills</li>
</ul>


Database & Application Security Engineer - Riyadh,KSA

AW ROSTAMANI GROUP

<ul><li>Lead security software development review for new product features and enhancements.</li><li>Plan and execute threat modelling activities within the software development lifecycle [following Safe Agile] to assess the security controls required for a given application.</li><li>Provide application security guidance and oversight across Security, Engineering &amp; Product teams by participating in design, architecture, and code reviews.</li><li>Plan, scope and execute application security reviews and engage with product teams and developers to clarify security requirements.</li><li>Validate, triage, and coordinate with software development team to remediate the vulnerabilities discovered through threat modelling and design review activities.</li><li>Raising incidents, working on incidents with Operations and Development teams to ensure proper and rapid fixes.</li><li>Provide subject matter expertise on security controls, and secure coding and design practices across development teams.</li><li>Making sure that all solutions are in line with GDPR and UAE Data Protection Laws</li><li>Understanding the architecture of various cloud (GCP/OCI/Azure) components related to compute, storage, network, and security.</li><li>Able to understand and translate the security concerns/suggestions raised during assessment of solutions by DEVSECOPS.</li><li>Able to provide the workaround of the security issue in case the suggested solution cannot be implemented due to time, cost, or scope limitations.</li><li>Developing and maintaining documentation of application security controls</li><li>Understand OWASP and align coding practices accordingly</li></ul><p>Job Type: Full-time</p>

Senior Application Security Engineer- UA National

NorthBay - Pakistan

<div>
 Job Title: SDLC Security Operations Engineer (DevSecOps)
 <br/>
 <br/>
 Experience: 7&ndash;9 Years
 <br/>
 <br/>
 Location: Pakistan - Remote (UAE Business Hours)
 <br/>
 <br/>
 Employment Type: Full-Time
 <br/>
 <br/>
 <strong>
  Job Summary
  <br/>
  <br/>
 </strong>
 We are looking for a hands-on SDLC Security Operations Engineer to embed security controls into CI/CD pipelines and engineering workflows for a larger enterprise customer in the UAE. This role focuses on operationalizing DevSecOps integrating scanning tools, enforcing pipeline guardrails, reducing security debt, and ensuring SDLC controls align with ISO 27001, SOC 2, PIC/DSS etc.
 <br/>
 <br/>
 Key Responsibilities
 <br/>
 <br/>
 <ul>
  <li>
   Integrate and operate security controls across CI/CD pipelines using GitHub, GitLab, Azure DevOps, and Jenkins
  </li>
  <li>
   Implement and manage SAST/DAST, dependency scanning, secret scanning, and pipeline security gates (build-time enforcement)
  </li>
  <li>
   Establish secure build and release practices: artifact integrity, signing/verification, and controlled promotions across environments
  </li>
  <li>
   Implement secure secrets management practices and prevent credential leakage in repos and pipelines
  </li>
  <li>
   Drive remediation workflows with developers: triage findings, validate fixes, reduce false positives, and improve rule tuning
  </li>
  <li>
   Embed security checks for infrastructure-as-code and configuration where applicable; ensure consistent secure-by-default patterns
  </li>
  <li>
   Support secure SDLC documentation, control mapping, and audit evidence for ISO 27001, SOC 2, etc. (policies, logs, approvals, attestations)
  </li>
  <li>
   Contribute to developer enablement via secure coding guidance, playbooks, and integration patterns that reduce friction
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Required Skills &amp; Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   7&ndash;9 years of experience in DevSecOps / Application Security Engineering / SDLC Security Operations
  </li>
  <li>
   Strong hands-on experience with CI/CD tools: GitHub, GitLab, Azure DevOps, Jenkins
  </li>
  <li>
   Hands-on experience operating AppSec tooling: SAST/DAST and software supply chain controls (dependency risk management)
  </li>
  <li>
   Strong understanding of secure SDLC concepts (threat modeling basics, security testing, release governance)
  </li>
  <li>
   Ability to collaborate deeply with engineering teams and translate findings into actionable fixes
  </li>
  <li>
   Familiarity with Linux-based build environments and common developer workflows
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Preferred Certifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   CSSLP or equivalent application security certifications
  </li>
  <li>
   CISSP or CISM
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  PCI DSS / Payment Security
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   PCIP (ISA) &ndash; PCI Professional (Internal Security Assessor)
  </li>
  <li>
   Qualified Security Assessor (QSA) (where applicable/available)
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Audit / Compliance
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   CISA
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Cloud / DevOps
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   AWS Certified DevOps Engineer &ndash; Professional
  </li>
  <li>
   AWS Certified Security &ndash; Specialty
  </li>
  <li>
   Microsoft Azure DevOps Engineer Expert (AZ-400)
  </li>
  <li>
   Microsoft Azure Security Engineer Associate (AZ-500)
   <br/>
   <br/>
  </li>
 </ul>
 Good to Have
 <br/>
 <br/>
 <ul>
  <li>
   Experience in telecom, government or regulated environments with audit-driven SDLC controls
  </li>
  <li>
   Exposure to container security, artifact repositories, and release governance patterns
  </li>
  <li>
   Automation skills (Python/Bash) to streamline scanning, reporting, and control enforcement
  </li>
 </ul>
</div>


SDLC Security Operations Engineer (DevSecOps)

Search 10000+ Application security engineer jobs near you this February. New roles added regularly across leading industries. Apply today.

10000 application security engineer jobs NEAR_ME

Application Security Engineer

Senior Application Security Engineer

Database & Application Security Engineer - Riyadh,KSA

Database & Application Security Engineer - Riyadh,KSA

Senior Application Security Engineer- UA National

SDLC Security Operations Engineer (DevSecOps)

SDLC Security Operations Engineer (DevSecOps)