Senior Application Security Engineer – Ad Tech & Secure SDLC

TripleLift; Greater London; Presencial; GBP 100 000 - 140 000; Tempo integral

Resumo da oferta

TripleLift is seeking a Senior Application Security Engineer to drive secure software development and maturity within Engineering and Security. You will build a global security program based on NIST CSF, scale with automated testing, and promote secure SDLC across CI/CD pipelines.

Responsibilities include threat modeling, vulnerability management, pentest coordination, and educating engineers on secure coding practices while enhancing cloud security and AWS controls.

Qualificações

• 5+ years in application security or secure software development.
• Experience with GHAS, SAST, DAST and SCA tools.
• Strong CI/CD integration and secure SDLC knowledge.
• Hands-on pentesting across web apps, APIs or cloud infra.
• Knowledge of OWASP Top 10 and security vulnerabilities.
• Threat modeling and design review participation.
• Secure coding guidance across languages (Python, Java, TypeScript, Go).
• AWS security controls and cloud-native security experience.

Responsabilidades

• Build and maintain a global security program based on NIST CSF.
• Scale application security with automated testing and code-review tools.
• Champion secure SDLC and remediate security defects in CI/CD.
• Automate security testing in CI/CD pipelines and maintain integrations.
• Administer GHAS across engineering repositories.
• Perform threat modeling and design/architecture reviews.
• Lead vulnerability management and third‑party pentest validation.
• Monitor app-layer threats and API security; address business logic flaws.
• Collaborate with product/engineering to bake security into design.
• Develop secure coding guidelines and engineer training.

Conhecimentos

GHAS

Code Scanning

SAST

DAST

SCA

CI/CD

Penetration Testing

Threat Modeling

OWASP Top 10

AWS Security

Cloud Security

Secure Coding

Ferramentas

Burp Suite

CodeQL

Veracode

Checkmarx

Snyk

OWASP ZAP

Descrição da oferta de emprego

TripleLift is seeking a Senior Application Security Engineer to drive secure software development and maturity within Engineering and Security. You will build a global security program based on NIST CSF, scale with automated testing, and promote secure SDLC across CI/CD pipelines.

Responsibilities include threat modeling, vulnerability management, pentest coordination, and educating engineers on secure coding practices while enhancing cloud security and AWS controls.