Application Security Engineer – Associate

About the role

We are looking for a motivated Application Security Engineer to join our cyber security team. In this associate‑level position you will protect our software applications by performing penetration tests, code reviews and a variety of security analyses, leveraging both traditional tools and AI‑driven solutions.

Key responsibilities

• Configure and manage automated security testing tools for static, dynamic and API scans.
• Perform penetration testing on web, mobile, API, thick‑client, network, cloud and AI components.
• Analyze scan results, validate true positives and provide remediation guidance.
• Collaborate with developers to embed security feedback into the development lifecycle.
• Document findings, mitigation strategies and maintain the bug bounty program.
• Support automation of security pipelines and continuous integration workflows.

Required profile

• Bachelor’s degree in Computer Science, Information Security or a related field.
• Experience in application security, code review and security testing.
• Familiarity with static and dynamic analysis tools, software composition analysis and automated testing frameworks.
• Knowledge of Java, C, C++ or .Net and strong understanding of object‑oriented programming.
• Ability to read and interpret SQL statements and work with ADO pipelines.
• Relevant certifications such as CISSP, CEH or OSCP are a plus.

Required skills

• Static code analysis
• Dynamic code analysis
• Software composition analysis
• Penetration testing (web, mobile, API, cloud)
• Java
• C
• C++
• .Net
• SQL
• ADO pipelines
• AI coding assistants (Claude, Devin, Codex)

What we offer

• Hybrid work model (4 days onsite, 1 day remote)
• Flexible Time Off and family support programs
• Retirement investment tools and education reimbursement
• Comprehensive health and well‑being resources
• Opportunities for continuous learning and career growth