Application Security Engineer

DefensePoint; Brasil; Teletrabalho; BRL 50.000 - 85.000; Tempo integral

Resumo da oferta

Join a leading company in the AppSec industry as an Application Security Engineer. This remote role offers an exceptional opportunity for growth, where you will perform security assessments, analyze vulnerabilities, and collaborate with development teams to enhance application security. Ideal candidates will have a strong foundation in security practices and a passion for learning.

Serviços

Opportunity for Growth

Focus on Learning and Achievement

Advancement Opportunities

Qualificações

• 1 year experience in application security or security research.
• Strong understanding of OWASP TOP10 vulnerabilities.
• Proficient in 2-3 programming languages like Java, C#, Python.

Responsabilidades

• Perform security assessments including penetration testing and threat modeling.
• Analyze applications and generate vulnerability reports.
• Collaborate with customers to tailor security solutions.

Conhecimentos

Application Security Knowledge

Vulnerability Assessment

Penetration Testing

Secure Code Review

Programming Skills

Cloud Infrastructure Knowledge

Communication Skills

Formação académica

BSc or BA in Cyber Security, Computer Science

Descrição da oferta de emprego

6 days ago Be among the first 25 applicants

Direct message the job poster from DefensePoint

We are seeking an Application Security Engineer to join a leading company in the AppSec industry and work on an exciting project. This is a well-paid remote role that offers an exceptional opportunity for growth and becoming an expert in application security.

Responsibilities:

• Perform different kinds of security assessments of customer applications. Including penetration testing, Threat Modeling and Secure Code Review.
• Analyze applications and generate vulnerability reports containing effective mitigation strategies.
• Analyze code security scan results, like SAST and DAST reports.
• Work together with customers to customize and tailor software security solutions to their environment.
• Collaborate with vendors in the community to identify and address flaws in software projects.
• Configure and enhance a DAST tool for multiple web application contexts.
• Work alongside the engineering team to share knowledge and insights on various aspects of application security.
• Help enable the secure development of new features for customer applications.

Your profile:

• At least 1 year of experience in application security or security research, demonstrating a strong understanding of application security attacks, vulnerabilities, and mitigation techniques.
• Strong knowledge in common Web Application security vulnerabilities (OWASP TOP10, SANS 25, etc.).
• At least 1 year of experience with Penetration Testing and Secure Code Reviews.
• Proficiency in 2-3 programming languages, such as Java, C#, Go, JS, Python, PHP, Ruby, etc.
• Language-agnostic approach to vulnerability identification in source code, capable of reading and identifying vulnerable parts in multiple programming languages.
• Knowledge of computer networks and cloud infrastructure.
• Excellent written and verbal communication skills in English.
• Customer-centric mindset.

Nice to Have:

While not mandatory, the following qualifications are desirable:

• BSc or BA in Cyber Security, Computer Science or a related field.
• Experience working with development teams.
• Previous experience with bug bounty research or published advisories/exploits for discovered 0day vulnerabilities in applications.
• Experience with Threat Modeling and Architecture Reviews of web applications.
• Knowledge of Secure Software Development Life-Cycle requirements.

What We Offer:

• Opportunity for Growth: We are committed to enabling your professional development, allowing you to grow and excel in your career.
• Expertise Development: We encourage individuals who are eager to challenge themselves and become experts in application security.
• Focus on Learning and Achievement: As part of a company dedicated to application security, you will have a unique environment where you can truly focus on learning, growth, and achieving your goals.
• Advancement Opportunities: We offer a genuine opportunity to advance in the field of Application Security. As you progress, you can aspire to become a Senior Engineer or even a Team Lead in our disruptive and forward-thinking company.

If this role excites you but you are concerned about not meeting all the requirements, please submit your application anyway. We would love to connect with you!

Join our team today and be a part of our journey to reshape the Application Security industry. Apply now!

Our recruiting process consists of...

• Send us your updated CV
• First interview (30 min)
• Technical Assessment
• Second interview (30 min)
• Offer
• Contract signing

Seniority level

• Seniority level

  Entry level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Engineering and Information Technology

• Industries

  Computer and Network Security

Referrals increase your chances of interviewing at DefensePoint by 2x

Get notified about new Application Security Engineer jobs in Brazil.

Azure DevOps Engineer - Advanced English - Remote

Intermediate Site Reliability Engineer, Foundations

Senior MLOps DevOps Engineer (Healthcare AI)

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.