обновлено 10 дней назад
Application Security Engineer (Cybersecurity)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Application Security Engineer (Cybersecurity): Embedding security throughout the software development lifecycle by partnering with developers and architects with an accent on vulnerability analysis and secure development practices. Focus on implementing SAST/DAST, performing threat modeling, and automating secure CI/CD pipelines.
Location: Must be based in Bogota or Medellin, Colombia. Hybrid work model.
Company
A global, AI-powered software and cloud solutions provider operating in over 70 countries with a team of 13,000+ professionals.
What you will do
- Integrate security best practices into the SDLC in collaboration with development and Application Services teams.
- Perform application security assessments, including code reviews and threat modeling.
- Manage and support security testing activities such as SAST, DAST, and dependency scanning.
- Identify, prioritize, and remediate vulnerabilities across internal and customer-facing systems.
- Collaborate with DevSecOps and engineering teams to improve secure CI/CD pipelines and automation.
- Develop secure coding standards and lead developer training initiatives.
Requirements
- Experience in Application Security, Cybersecurity, or Secure Software Development.
- Strong understanding of OWASP Top 10 and secure coding principles.
- Experience with application security tools including SAST, DAST, container, and dependency scanning.
- Familiarity with modern development environments, APIs, cloud platforms, and CI/CD pipelines.
- Proficiency in English.
- Must be based in Colombia.
Culture & Benefits
- Comprehensive health and well-being programs.
- Continuous learning and career development opportunities.
- Performance-based incentives and employee share participation.
- Flexible and hybrid work models.
- Engagement in large-scale global projects.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →