Application Security Engineer

Company

hirify.global provides software delivery and security solutions for companies managing applications from code to production.

What you will do

• Develop internal application security tools, automations, and AI agents.
• Design and implement SSDLC practices and automated security controls across CI/CD pipelines.
• Build and operate scalable vulnerability management frameworks for cloud-native services and SaaS products.
• Integrate threat modeling, SAST, DAST, and SCA into Agile and DevOps processes.
• Partner with Product, Engineering, DevOps, and Security teams to embed security throughout the development lifecycle.
• Perform secure code reviews, track and triage vulnerabilities, and support remediation strategies.

Requirements

• 6–7 years of experience in application security and product security.
• Deep knowledge of application security and software vulnerabilities.
• Strong coding or scripting skills in Python, Go, Java, or JavaScript.
• Hands-on experience with CI/CD pipelines, security tools, and DevSecOps practices.
• Familiarity with cloud architectures, microservices, containers, and Kubernetes.
• Understanding of software development processes, secure coding principles, and effective technical collaboration.

Nice to have

• Penetration testing knowledge.
• Familiarity with machine learning and AI concepts applied to security, including anomaly detection and predictive analytics.

Culture & Benefits

• Work with a team of software security engineers focused on SSDLC automation, vulnerability management, and proactive engagement with R&D.
• Collaborate across Product, Engineering, DevOps, and Security functions.
• Contribute to security practices used across products serving thousands of customers, including Fortune 100 companies.