Application Security Engineer, Cognism

• This role requires a deep understanding of application security principles, risk assessment, and remediation techniques
• Education: Bachelor’s degree in computer science, Information Security, or related field (or equivalent work experience)
• Experience: 3-5 years of experience in application security or software development with a focus on security
• Strong understanding of common application vulnerabilities (e.g., OWASP Top 10, SANS CWE Top 25)
• Proficiency in security testing tools (e.g., SonarCloud)
• Experience with secure coding practices in at least one programming language (e.g., Java, Python, C#, JavaScript)
• Familiarity with DevSecOps practices and tools (e.g., Jenkins, Git, Docker)
• Knowledge of web application architectures and cloud security principles (e.g., AWS, Azure)
• Understanding of encryption protocols, authentication mechanisms, and access control models
• Strong analytical and problem-solving skills
• Excellent communication skills, both written and verbal, with the ability to convey complex security issues to non-technical stakeholders
• Ability to work independently and as part of a team in a fast-paced environment
• Attention to detail and commitment to high-quality deliverables

Desirable

• As an Application Security Engineer, you will play a critical role in ensuring the security of applications throughout the software development lifecycle (SDLC)
• You will work closely with cross functional teams and members of the information security team to identify vulnerabilities, design secure applications, and implement security best practices
• Vulnerability Assessment & Remediation: Conduct in-depth security assessments of web, identifying vulnerabilities using automated tools (e.g., SAST, DAST) and manual techniques. Provide actionable recommendations to development teams for remediation
• Security Design Review: Collaborate with application and security architects and developers to ensure security is integrated into the design of applications. Conduct threat modelling and provide guidance on secure coding practices
• Penetration Testing: Coordinate application-level penetration tests to identify security flaws. Document findings and work with relevant teams to ensure timely remediation
• Security Code Reviews: Analyse source code for security vulnerabilities, focusing on secure coding practices and providing feedback to developers on how to mitigate risks
• Automation & Integration: Work with DevOps teams to integrate security testing tools and processes into CI/CD pipelines, ensuring that security is continuously monitored throughout the development process
• Collaboration: Work closely with cross-functional teams including development, DevOps, QA, and IT operations to foster a culture of security within the organization