Hands-On Application Security Engineer

VaporVM; Dubai; On-site; AED 180,000 - 320,000; Full time

Job summary

VaporVM is seeking an on-site Application Security Engineer to safeguard enterprise applications throughout their lifecycle. You will conduct assessments, manage security tools, identify vulnerabilities, and guide remediation while aligning security with development and IT operations.

You will lead secure coding practices, collaborate with DevOps and cloud teams, and drive SSDLC compliance across internal and third-party apps.

Qualifications

• Bachelor’s degree in cybersecurity or related field.
• Certifications: CSSLP, GWAPT, CASE, CEH, OSWE, OSCP, CISSP.

Responsibilities

• Application Security Operations: administer, configure and optimise SAST/DAST/IAST and SCA tools.
• Monitor controls and ensure ongoing effectiveness of security measures.
• Support deployment and management of security solutions in dev/prod.
• Troubleshoot issues in application security tooling.

Skills

Application Security

SAST/DAST/IAST/SCA

Vulnerability Management

SSDLC/Secure coding

Cloud-native apps

CI/CD & DevSecOps

OWASP Top 10/ASVS

Education

Bachelor’s Degree in Cybersecurity or related field

Tools

Veracode

Fortify

Checkmarx

SonarQube

Burp Suite

OWASP ZAP

Nessus

Qualys

Rapid7

GitHub Advanced Security

Job description

VaporVM is seeking an on-site Application Security Engineer to safeguard enterprise applications throughout their lifecycle. You will conduct assessments, manage security tools, identify vulnerabilities, and guide remediation while aligning security with development and IT operations.

You will lead secure coding practices, collaborate with DevOps and cloud teams, and drive SSDLC compliance across internal and third-party apps.