Application Security Engineer — Chile (US Market)

hiberus; Chile; On-site; CLP 28,000,000 - 52,000,000; Full time

Benefits offered by this job

Freelance contracting option

Permanent employment contract with hIB

Job summary

hiberus is seeking an Application Security Engineer to join an international project focused on the US market. You will analyze security findings, validate vulnerabilities, and collaborate with development teams to implement effective remediation strategies across SDLC.

The role emphasizes secure coding practices, SAST/DAST/SCA usage, and CI/CD security integration in a hands-on environment. Excellent English and cross‑functional collaboration are essential.

Qualifications

• Hands-on security experience across SDLC and DevSecOps.
• 3–5 years in Application/Security roles with web apps and APIs.
• Knowledge of SAST, DAST, SCA methodologies and tools.

Responsibilities

• Analyze, validate, and prioritize application security findings.
• Assess exploitability, severity, and business impact.
• Perform secure code reviews and remediation guidance.
• Support integration of security tools into CI/CD pipelines.
• Coordinate testing, validation, and rescans to confirm fixes.
• Document findings, risks, and recommendations clearly.
• Collaborate with developers, QA, DevOps, and InfoSec teams.
• Apply AI tools to assist vulnerability analysis where relevant.
• Maintain security quality gates and third-party risk reviews.

Skills

Application security

Vulnerability assessment

Secure code review

DevSecOps

SAST/DAST/SCA

OWASP Top 10

CI/CD security

Security tooling

English proficiency

Threat modeling

Tools

Checkmarx

SonarQube

Snyk

Fortify

OWASP ZAP

Burp Suite

OpenGrep

Job description

hiberus is seeking an Application Security Engineer to join an international project focused on the US market. You will analyze security findings, validate vulnerabilities, and collaborate with development teams to implement effective remediation strategies across SDLC.

The role emphasizes secure coding practices, SAST/DAST/SCA usage, and CI/CD security integration in a hands-on environment. Excellent English and cross‑functional collaboration are essential.