application security engineer

<div>
 
 JOB DESCRIPTION
 
 
 
 
 
 Performing security tests of internal and externally IT infrastructures like IP, API, Web
 
 
 pages, Servers or network devices within the company, in line with company objectives
 
 
 and regulatory requirements, and detecting and reporting vulnerabilities with manual or
 
 
 automated tools in a certain periods.
 
 
 
 
 
 QUALIFICATIONS:
 
 
 
 
 
 &bull; BS or MS in Computer Science, Computer/Electrical/Electronics/Mathematics
 
 
 Engineering or related fields
 
 
 &bull; Experience of at least 4 years in Penetration or Application Security Test projects
 
 
 &bull; Having a good communication skills
 
 
 &bull; Excellent problem solving skills and ability to formulate alternative approaches
 
 
 &bull; Knowledge of computer networking concepts and protocols and network security
 
 
 methodologies, operating systems, computer networks and databases
 
 
 &bull; Knowledge of software and secure code development processes
 
 
 &bull; Preferably designed and tested SSDLC processes
 
 
 &bull; Ability to understand and work with various web and mobile services such as SOAP,
 
 
 WSDL, REST, etc.
 
 
 &bull; Understand and evaluate applications from both technical and business process
 
 
 perspectives
 
 
 &bull; Experienced in tools used in penetration tests such as Metasploit, Nessus, Burpsuite,
 
 
 Netsparker, Acunetix
 
 
 &bull; Preferably having or had a BRSA penetration test
 
 
 
 
 
 What you'll do:
 
 
 
 
 
 &bull; Performing manual network penetration tests on IT infrastructure within the company
 
 
 &bull; Performing penetration tests, analyzing test results, analyzing risks and developing
 
 
 solution for vulnerabilities.
 
 
 &bull; Performing manual penetration tests on mobile, web and API based applications within
 
 
 the company
 
 
 &bull; Determination and follow-up of BRSA penetration test processes
 
 
 &bull; Performing vulnerability vulnerabilities scans with products such as Nessus, Rapid7,
 
 
 analyzing the test results and meeting with the related business or IT units to eliminate
 
 
 the vulnerabilities
 
 
 &bull; Scanning application source codes with static application security test tools and
 
 
 tracking the vulnerabilities.
 
 
 &bull; Performing security hardening for Windows and Linux operating systems.
 
 
 
 
 
 
 
 
 TOM Bank is here to change banking!
 
 
 
 
 
 TOM Bank is T&uuml;rkiye&rsquo;s first game-changer digital retail bank with the vision of being the biggest in T&uuml;rkiye and among the five fintech in Europe.
 
 
 
 
 
 TOM , which reached 9 million users in a short time with the Hadi application, is under the umbrella of Ayd&inodot;n Holding which hosts strong brands such as A-101, English Home, Memorial and also includes companies TOM Bank, TOM Digital, TOM PAY, TOM Finansman.
 
 
 
 
 
 
 Who We Are :
 
 
 
 
 
 
 As TOM,
 
 <ul>
 <li>
 Customer Passionate 💜
 </li>
 <li>
 Game Changers 🚀
 </li>
 <li>
 Smart Efficient 🤝
 </li>
 <li>
 Super Clear 😎
 </li>
 <li>
 The Dream Team🏅
 </li>
 </ul>
 
 
 
 
 
 If you are ready to take off, join us and let&rsquo;s change the future of banking together!
 
 
 
 
 To know us better, download the link :
 
 
 https://hadigeliyorhadi.com.tr/hadi-indir
 
 
 
 
</div>

Application Security Engineer

Target

The pay range is $95,000.00 - $171,000.00 Pay is based on several factors which vary based on position. These include labor markets and in some instances may include education, work experience and certifications. In addition to your pay, Target cares about and invests in you as a team member, so that you can take care of yourself and your family. Target offers eligible team members and their dependents comprehensive health benefits and programs, which may include medical, vision, dental, life insurance and more, to help you and your family take care of your whole selves. Other benefits for eligible team members include 401(k), employee discount, short term disability, long term disability, paid sick leave, paid national holidays, and paid vacation. Find competitive benefits from financial and education to well-being and beyond at . About us: Working at Target means helping all families discover the joy of everyday life. We bring that vision to life through our values and culture. Learn more about Target here.As a Senior Application Security Engineer, you serve as a specialist in the engineering team that supports the product. You help develop and gain insight in the application architecture. You can distill an abstract architecture into concrete design and influence the implementation. You show expertise in applying the appropriate software engineering patterns to build robust and scalable systems. You are an expert in programming and apply your skills in developing the product. You have the skills to design and implement the architecture on your own but choose to influence your fellow engineers by proposing software designs, providing feedback on software designs and/or implementation. You show good problem-solving skills and can help the team in triaging operational issues. You leverage your expertise in eliminating repeat occurrences.Use your skills, experience and talents to be a part of groundbreaking thinking and visionary goals. As a Sr. Engineer, you'll take the lead as you <ul><li>Design, build, and operate security tooling and automation that integrates deeply into development workflows (e.g., CI/CD, linting, auto-fix, click-to-fix flows).</li><li>Create solutions that make the secure path the easiest path - embedding guardrails, reducing manual fixes, and improving the developer experience at scale.</li><li>Augment existing processes with a security lens: dependency scanning, SAST/DAST/SCA, supply chain risk, and automated remediations.</li><li>Collaborate with product engineering teams to enable secure-by-default applications, influencing architecture and design with practical security guidance.</li><li>Build "push-down" solutions such as rules, plugins, and pipeline integrations so that security issues are surfaced and fixed where code is written.</li><li>Evaluate new opportunities to improve security across Target's environment, targeting solutions that deliver the greatest impact.</li><li>Maintain observability and feedback loops for security signals across production systems.</li><li>Contribute to disaster recovery and incident response planning with a focus on application-layer resilience.</li><li>Share knowledge and mentor teammates in security engineering practices, fostering a culture of curiosity and shared ownership.</li></ul>This role is part of a team changing how security is done at scale - delivering automation, guardrails, and fixes that directly shape how applications are built securely across Target.Core responsibilities of this job are described within this job description. Job duties may change at any time due to business needs.About you:<ul><li>Four-year degree or equivalent experience</li><li>5+ years in software development or security engineering with strong coding skills</li><li>Experience building or maintaining security tools, automations, or frameworks (e.g., integrating scanners, writing rules, developing CI/CD integrations)</li><li>Proficiency in Java, Kotlin, JavaScript/TypeScript, and experience with containerization (e.g., Docker)</li><li>Experience working with CI/CD systems (Jenkins, GitHub Actions, GitLab CI, etc.)</li><li>Strong understanding of open source dependencies, supply chain risks, and SCA techniques</li><li>Familiarity with SAST/DAST tools and ability to translate results into actionable fixes</li><li>Practical experience in security code reviews, threat modeling, or vulnerability assessment</li><li>Demonstrated ability to embed security into developer workflows and improve the developer experience</li><li>Passion for staying current with security trends, tools, and developer-centric security models</li><li>Preferred (not required): security certifications such as CISSP, CSSLP, OSCP, GIAC, CompTIA Security+, or equivalent demonstrated expertise</li></ul> This position will operate as a Hybrid/Flex for Your Day work arrangement based on Target's needs. A Hybrid/Flex for Your Day work arrangement means the team member's core role will need to be performed both onsite at the Target HQ MN location the role is assigned to and virtually, depending upon what your role, team and tasks require for that day. Work duties cannot be performed outside of the country of the primary work location, unless otherwise prescribed by Target. Click here if you are curious to learn more about Minnesota. Benefits EligibilityPlease paste this url into your preferred browser to learn about benefits eligibility for this role: Americans with Disabilities Act (ADA) In compliance with state and federal laws, Target will make reasonable accommodations for applicants with disabilities. If a reasonable accommodation is needed to participate in the job application or interview process, please reach out to . Non-accommodation-related requests, such as application follow-ups or technical issues, will not be addressed through this channel. <img src="https://www.jobg8.com/Tracking.aspx?Efpc8UlCsYd0pjjD63a5P9vxGqNrfmQyu" width="0" height="0" />

Senior Application Security Engineer

Bayut.com

In this role you will: <ul> <li>Collaborate with internal teams to implement security controls, address vulnerabilities and improvesecurity practices in the relevant platforms &amp; services.</li> <li>Conduct penetration testing on web applications, mobile applications, APIs, networks, and system and coordinate the pen-testing projects executed by external partners.</li> <li>Ensure identified vulnerabilities, threats and risks are captured and processed in line with our risk management policy and procedure.</li> <li>Take part in security incident resolution and contribute to the development, maintenance and assessment of the Incident Response Plan s effectiveness.</li> <li>Monitor the internal alerting systems and drive the events to closure.</li> <li>Participate in regular internal and external audits (including periodic user access reviews) on critical systems and ensure audit findings are remediated in the agreed timeframe.</li> <li>Reduce the information security knowledge gap within the technical teams by contributing to the creation of educational materials and awareness campaigns.</li> <li>Implement and regularly review the internal security policies and controls across all business-critical services.</li> </ul>

TekBoox

Tekboox US base IT company urgently looking to hire experienced Application/ Information Security Engineer Key Responsibilities<ul><li>Perform penetration testing across web, mobile, APIs, networks, cloud, and Active Directory environments.</li><li>Identify, exploit, and document vulnerabilities, misconfigurations, and insecure coding practices.</li><li>Proactively design and implement new security processes, tools, and best practices to improve organizational security maturity.</li><li>Prepare detailed technical reports and executive-level summaries with clear remediation steps.</li><li>Ensure all offensive security activities comply with HIPAA Security Rules and ISO 27001 ISMS standards.</li><li>Support security audits, risk assessments, and compliance reporting by providing accurate technical evidence.</li><li>Conduct security awareness training sessions, including phishing simulations and policy reinforcement.</li><li>Collaborate with Development, DevOps, and Compliance teams to integrate security into SDLC and deployment pipelines.</li></ul>Required Skills &amp; Qualifications<ul><li>Bachelor&rsquo;s degree in Computer Science, Cybersecurity, or a related discipline.</li><li>Minimum 3+ years of experience in offensive security, penetration testing, or red teaming.</li><li>Ability to work independently with strong ownership of security initiatives.</li><li>Proficiency with tools such as Burp Suite, Metasploit, Nmap, BloodHound, Wireshark, and custom scripting.</li><li>Strong understanding of HIPAA Security &amp; Privacy Rules and ISO 27001 controls.</li><li>Hands-on experience with scripting/programming (Python, Bash, or PowerShell).</li><li>Strong analytical and problem-solving skills with the ability to deliver high-quality reports.</li><li>Excellent communication and presentation skills to engage technical and non-technical audiences.</li></ul>Preferred Certifications (any one or more of the following)<ul><li>Offensive Security: OSCP, CPTS, CRTP, GPEN, or equivalent.</li><li>Compliance &amp; Governance: HIPAA Security/Privacy Training Certificate.</li><li>ISO Standards: ISO 27001 Lead Auditor / Lead Implementer.</li></ul>Job Timing &amp; Location Timing:1pm to 10PM (Onsite 5days a week) Location:College Road, Township, LahoreInterested share resume saddam.hussain@tekboox.comJob Type: Full-timePay: Rs200,000.00 - Rs250,000.00 per monthWork Location: In person

Application/ Information Security Engineer

LATENT

<div><h1 class="jobSectionHeader">Security Engineer: App Sec Lead</h1>
Location: Remote or in-office option in San Francisco or New York
The Mission: Join us in building the core infrastructure that enables the mass delivery of clinical AI across American healthcare. Your work will directly translate into improving patient outcomes by accelerating access to treatment and massively increasing operational efficiency for healthcare workers.<h2 class="jobSectionHeader">
What We Look for in a Great Application Security Engineer</h2>
We are looking for an application security engineer who is excited about building a program from scratch hand in hand with our amazing engineering team. If the following things excite you, you should apply!<ul><li>
You see a greenfield in application security and can imagine what the end product would like and how to get us there.</li><li>
Getting your hands dirty in the code base (NodeJS/Typescript/Python), including even fixing some findings or contributing to some secure libraries, and eventually being an architect for our secure development libraries sounds like an amazing time.</li><li>
No process for things is simply an opportunity to partner with the right engineers and leaders to build security process</li><li>
Firing up your favorite pentesting tools and poking at the codebase yourself to see if you can find a vulnerability or two (hopefully no more than that)</li><li>
In the near future, turning around and helping hire the rest of the application security team at Latent as the company grows</li></ul><h2 class="jobSectionHeader">
What You'll Work On (Responsibilities)</h2>
As the first dedicated application security engineer, you will be<ul><li>
Choosing the right App Sec tools for our environment to make code secure before it is shipped and working with engineering to role them out widely</li><li>
Create and mature processes around core pillars of Latent&rsquo;s security program: vulnerability management, architecture reviews, pentesting, and threat modeling</li><li>
Doing code reviews and even a little bug fixing yourself (we are a startup after all)</li><li>
Helping build and POC new secure ways of writing code (validation libraries, improvements to authentication/authorization practices, encryption SDKs for developers)</li><li>
Helping re-imagine permissioning and authorization for users of the Latent platform</li><li>
Working alongside engineers to balance business requirements with the right security controls</li><li>
Creating a mature pentesting and/or bug bounty program to validate production code is being</li><li>
Bringing security checks and tooling to the places that developers work (AI-based IDEs, CI/CD, ect..)</li></ul><h2 class="jobSectionHeader">
Technical Qualifications &amp; Environment</h2>
You should have experience creating, building, or scaling (or all three) a hands-on application security program in an organization that is cloud first.<ul><li>
Primary Coding Language: Javascript (NodeJS/Typescript) and Python</li><li>
Experience doing threat modeling and architecture reviews</li><li>
Experience working with engineering and technical leadership to build security processes like vulnerability management</li><li>
Deep understanding of web and api-based security vulnerabilities (how to spot them, how to fix them, and what patterns need to be created to counter them)</li><li>
Experience architecting (and maybe even building) access management and authorization systems</li><li>
Bonus Points: You dabble in other areas of security (Cloud, IT, GRC ect..), have a little bit of knowhow in security detection and response, or have worked in a HIPAA-compliant environment.</li></ul></div>

Security Engineer: App Sec Lead

Oman Housing Bank | بنك الإسكان العُماني

<div>
 
 
 Job Purpose:
 
 
 
 The Digital Security Engineer embeds security controls throughout the software development and deployment lifecycle, ensuring banking systems remain secure, compliant, and resilient. He/She implements automated security scanning, builds and maintains DevSecOps pipelines, and performs application security testing across internal and third-party platforms. The Digital Security Engineer collaborates with development teams to remediate vulnerabilities, supports secure integration with external partners, and ensures compliance with CBO regulations and internal cybersecurity frameworks.
 
 
 
 
 
 
 Key Accountabilities:
 
 
 <ul>
 <li>
 Designs and implements CI/CD security pipelines in GitLab with automated security gates.
 </li>
 <li>
 Configures and maintains security scanning tools including SonarQube, Snyk, and Burp Suite.
 </li>
 <li>
 Performs application security testing on web and mobile applications (React Native, Flutter).
 </li>
 <li>
 Conducts API security assessments for internal systems and partner integrations.
 </li>
 <li>
 Reviews source code in JavaScript, TypeScript, Dart, and Node.js to identify vulnerabilities.
 </li>
 <li>
 Performs penetration testing on digital banking applications and services.
 </li>
 <li>
 Assesses mobile app security for iOS and Android, including reverse engineering and threat analysis.
 </li>
 <li>
 Implements and manage secrets and key management using OCI Vault.
 </li>
 <li>
 Configures Web Application Firewall (WAF) rules and policies in Oracle Cloud Infrastructure (OCI).
 </li>
 <li>
 Ensures compliance with CBO cybersecurity regulations, PCI-DSS standards, and internal ISMS policies.
 </li>
 <li>
 Conducts third-party security assessments for partner integrations and platforms.
 </li>
 <li>
 Manages software license compliance and audits usage of open-source and commercial components.
 </li>
 <li>
 Reviews and approves third-party libraries to ensure proper licensing and usage.
 </li>
 <li>
 Guides developers in selecting properly licensed components or suggests compliant alternatives.
 </li>
 <li>
 Manages the vulnerability disclosure lifecycle and coordinates remediation workflows.
 </li>
 <li>
 Trains developers on secure coding practices aligned with OWASP Top 10 and industry standards.
 </li>
 <li>
 Responds to application-layer security incidents and forensic investigations.
 </li>
 <li>
 Uses AI tools to analyze vulnerabilities and generate automated remediation guidance.
 </li>
 </ul>
 
 
 
 
 
 Qualifications and Experience:
 
 
 <ul>
 <li>
 Bachelor's degree in Cybersecurity, Computer Science, or related field
 </li>
 <li>
 A professional certification in one of the cybersecurity or information security domains (e.g., CISSP, CEH, OSCP, GWAPT, GIAC, etc.)
 </li>
 <li>
 Minimum of 5 years in application security, DevSecOps, or security engineering.
 </li>
 <li>
 Proven track record of executing similar accountabilities in Banking, fintech, or a regulated industry.
 </li>
 <li>
 Vast experience in web and mobile application security testing.
 </li>
 <li>
 Familiarity with JavaScript/TypeScript OR Dart preferred.
 </li>
 <li>
 Strong understanding of secure coding practices and OWASP Top 10.
 </li>
 <li>
 Hands on experience in implementing security in CI/CD pipelines.
 </li>
 <li>
 Clear understanding of CBO cybersecurity regulatory requirements.
 </li>
 </ul>
 
 
 
 
 
 Key Skills &amp; Competencies:
 
 
 <ul>
 <li>
 Strong proficiency in React Native and Flutter security assessments
 </li>
 <li>
 Advanced capability in software license compliance and audit processes
 </li>
 <li>
 Good in open-source license management (MIT, Apache, GPL, etc.).
 </li>
 <li>
 Hands on PCI-DSS compliance implementation
 </li>
 <li>
 Excellent in securing Oracle Cloud Infrastructure (OCI) environments
 </li>
 <li>
 Good skills in IBM API Connect security configurations
 </li>
 <li>
 Good Temenos platform application security skills.
 </li>
 <li>
 Profeicent in RASP technologies
 </li>
 <li>
 Good skills in threat modeling using STRIDE and PASTA frameworks
 </li>
 <li>
 Hands-on skill in binary analysis and reverse engineering techniques
 </li>
 <li>
 Good in container security scanning and compliance skills.
 </li>
 <li>
 SIEM tools (Splunk, ELK)
 </li>
 <li>
 Excellent analytical and problem-solving skills
 </li>
 <li>
 Strong interpersonal communication skills preferably in Arabic and English
 </li>
 </ul>
 
 
 
 
 
 Applicants who are meeting the job requirements will be contacted.
 
 
 
 
 
 
 
 ** Applications will be accepted until 2-Nov-2025 at 2:00 P.M
 
 
 
 
 Submissions received after this date and time will not be considered **
 
 
</div>

Digital Security Engineer

JPMorganChase

<div>JOB DESCRIPTION 
Your seniority as a security engineer puts you in the ranks of the top talent in your field. Play a critical role at one of the world's most iconic financial institutions where security is vital.
As a Security Engineer III at JPMorgan Chase within the Cybersecurity &amp; Tech Controls team, you will be an experienced member of a team dedicated to delivering software solutions that meet pre-defined functional and user requirements, while also ensuring protection against misuse, circumvention, and malicious behavior. We are seeking a highly skilled AI/ML Security Engineer to join our team &ndash; not only as an AI/ML security subject matter expert, but one who is also passionate about AI/ML security. This role is pivotal in ensuring the security and robustness of our AI and Machine Learning systems. You will be responsible for defining security controls and engineering the tools to enhance the security posture of our AI/ML systems.
Job responsibilities<ul><li><div>
Demonstrates hands-on expertise as a technologist, with extensive experience in Java and Python coding. Capable of designing, developing, and maintaining robust applications using best practices in object-oriented programming and software engineering.</div></li><li><div>
Possesses a solid understanding and practical experience with Spring and Spring Boot frameworks for building scalable enterprise applications. Highly proficient in MySQL and SQL programming, including the ability to write, optimize, and maintain complex stored procedures.</div></li><li><div>
Experienced in designing, developing, and deploying microservices-based solutions. Well-versed in implementing secure APIs, applying best practices for authentication, authorization, and data protection.</div></li><li><div>
Understanding of cloud computing concepts and hands-on experience with major cloud platforms such as AWS and Azure. Skilled in leveraging cloud services for application deployment, scalability, and reliability.</div></li><li><div>
Experience in Unix environments and shell scripting for automation and system management. Knowledgeable in containerization technologies like Docker, and container orchestration tools such as Kubernetes and Helm for managing distributed applications.</div></li><li><div>
Experience with cloud infrastructure as code (IaC) tools, such as Terraform, for automating and managing cloud resources. Possesses foundational knowledge of networking concepts and protocols, including TCP/IP, routing, DNS, and DHCP.</div></li><li><div>
Understands identity and access management (IAM) concepts and protocols, including OAuth 2.0, OpenID Connect, and SAML, ensuring secure user authentication and authorization across applications and services</div></li></ul>
<div>Required qualifications, capabilities, and skills</div>
<ul><li>Formal training or certification on security engineering concepts and 3+ years applied experience</li><li><div>
Demonstrates practical expertise as a technologist, actively engaging in hands-on work with advanced systems and solutions.</div></li><li><div>
Recognized as a subject matter expert in securing AI and machine learning environments, with a strong focus on protecting these systems from evolving threats.</div></li><li><div>
Possesses in-depth experience with AI and machine learning technologies, including working with notebooks, Python, TensorFlow, PyTorch, and related tools.</div></li><li><div>
Has a comprehensive understanding of the attack surface and threat landscape specific to AI systems, and is skilled in implementing effective controls throughout the machine learning development lifecycle.</div></li><li><div>
Well-versed in current concepts and trends related to AI safety, AI alignment, and AI cybersecurity, ensuring responsible and secure deployment of AI solutions.</div></li><li><div>
Maintains a solid grasp of generative AI (GenAI) principles and their practical applications within modern technology environments</div></li></ul><div>
</div><div>Preferred qualifications, capabilities, and skills</div><ul><li>
Bachelor&rsquo;s or Master&rsquo;s degree in Computer Science, Information Security, or a related field</li><li>
Certifications in cloud security or AI/ML security</li><li>
Certifications in cloud development</li><li>
Excellent problem-solving skills and attention to detail</li><li>
Manage multiple priorities and effectively deliver in a fast-paced, dynamic environment</li></ul>
ABOUT US</div>

Security Engineer III - Ai/ML

Search 10000+ Application security engineer jobs near you this October. New roles added regularly across leading industries. Apply today.

10000 application security engineer jobs NEAR_ME

Application Security Engineer

Senior Application Security Engineer

Application Security Engineer

Application/ Information Security Engineer

Security Engineer: App Sec Lead

Digital Security Engineer

Security Engineer III - Ai/ML