AWS AppSec Engineer: Purple Team & Automation

DGH Recruitment; Dublin; On-site; EUR 90,000 - 120,000; Full time

Job summary

DGH Recruitment are recruiting an Application Security Engineer for a permanent role in Dublin. The candidate will work with engineering and IT teams to enhance application security, APIs and infrastructure by implementing preventative controls and testing for risks.

Responsibilities include championing secure-by-design, managing security tools (DAST, SAST/SCA), threat modelling, and implementing IAM/auth mechanisms with cloud services (AWS). Office presence required in Dublin.

Qualifications

• Experience in application security with red/blue/purple team activities.
• Development experience or contribution to Open-Source projects.
• Hands-on with DAST tools (Burp Suite, OWASP ZAP or equivalent).
• Experience with SAST/SCA tools (Snyk, Veracode, Checkmarx or equivalent).
• Familiar with GitHub/GitLab, Datadog, Jira, Docker and IDEs.
• Cloud experience (AWS) and related services (WAF, Cognito).
• Knowledge of IaC, Kubernetes and container ecosystems.
• Experience with authentication protocols such as OpenID Connect and OAuth.

Responsibilities

• Act as security champion to promote secure-by-design practices.
• Identify and analyse web app security vulnerabilities.
• Oversee application security platforms for coverage, compliance, remediation.
• Carry out threat modelling and review architectures.
• Implement safeguards to prevent security incidents.
• Manage SAST/ SCA tools across code repositories; extend DAST coverage.
• Scale automated testing to maximize coverage; conduct pen tests on in-house apps.

Skills

Application security

Purple team

Software development

DAST tooling

SAST/SCA tooling

GitHub/GitLab

Datadog

Jira

Docker

AWS

Kubernetes

OIDC/OAuth

Tools

GitHub/GitLab

Datadog

Jira

Docker

Kubernetes

Job description

DGH Recruitment are recruiting an Application Security Engineer for a permanent role in Dublin. The candidate will work with engineering and IT teams to enhance application security, APIs and infrastructure by implementing preventative controls and testing for risks.

Responsibilities include championing secure-by-design, managing security tools (DAST, SAST/SCA), threat modelling, and implementing IAM/auth mechanisms with cloud services (AWS). Office presence required in Dublin.