It Security Engineer

Pintarnya; Jawa Barat; Hybrid; IDR 267,840,000 - 468,720,000; Full time

Job summary

Pintarnya in Tangerang is seeking an Application Security Engineer to integrate security into the software development lifecycle. The role collaborates with development teams to identify and mitigate vulnerabilities, conduct security reviews, and implement secure coding practices.

You will perform SAST, DAST and IAST testing, stay current with threats, and help shape security policies. This is a hybrid role with growth opportunities in a fast-paced tech environment.

Responsibilities

• Conduct security assessments of web and mobile applications throughout the development lifecycle (SDLC).
• Perform static (SAST) and dynamic (DAST) application security testing, and interactive application security testing (IAST).
• Identify, prioritize, and track application security vulnerabilities to remediation.
• Collaborate with development teams to provide guidance on secure coding practices and remediation strategies.
• Develop and maintain security testing tools and automation frameworks.
• Assist in threat modeling exercises for new features and applications.
• Contribute to the development and enforcement of application security policies and standards.
• Provide security awareness training to development teams.
• Stay current with emerging application security threats and vulnerabilities.

Job description

About the Role Our client, a fast-paced software development firm located in Tangerang, is seeking an Application Security Engineer (AppSec) to integrate security into their software development lifecycle. This role is critical for ensuring that applications are designed, developed, and deployed securely. You will work closely with development teams to identify and mitigate security vulnerabilities, conduct security reviews, and implement best practices for secure coding. This is an excellent opportunity for a security-focused developer or a security professional with a strong understanding of software development, working within the growing tech landscape of Tangerang. The role offers a hybrid work model, balancing team collaboration with individual flexibility.

Key Responsibilities

• Conduct security assessments of web and mobile applications throughout the development lifecycle (SDLC).
• Perform static (SAST) and dynamic (DAST) application security testing, and interactive application security testing (IAST).
• Identify, prioritize, and track application security vulnerabilities to remediation.
• Collaborate with development teams to provide guidance on secure coding practices and remediation strategies.
• Develop and maintain security testing tools and automation frameworks.
• Assist in threat modeling exercises for new features and applications.
• Contribute to the development and enforcement of application security policies and standards.
• Provide security awareness training to development teams.
• Stay current with emerging application security threats and vulnerabilities.