Senior Application Security Engineer - Remote, SDLC Security

Placements24; Queenstown; Hybrid; NZD 130,000 - 180,000; Full time

Benefits offered by this job

Fully remote

Job summary

Placements24 is seeking a Senior Application Security Engineer to embed security across the SDLC for our remote engineering team serving Queenstown-area clients.

You will identify vulnerabilities, conduct security code reviews, perform threat modeling, and implement secure coding standards in collaboration with developers. A strong background in OWASP Top 10, SAST/DAST/IAST, cloud security concepts, and excellent communication are essential for success.

Qualifications

• Bachelor's degree in Computer Science, Engineering, or related field.
• Minimum of 5 years of experience in application security or software development with a strong security focus.
• In-depth knowledge of web application security vulnerabilities (OWASP Top 10) and mitigation techniques.
• Experience with security testing tools (SAST, DAST, SCA).
• Proficiency in at least one programming language (Java, Python, C#, JavaScript).
• Understanding of secure SDLC methodologies.
• Familiarity with cloud security concepts (AWS, Azure, GCP) is a plus.
• Strong analytical and problem-solving skills.
• Excellent communication and collaboration abilities.
• Certifications such as CSSLP or GWAPT are beneficial.

Responsibilities

• Collaborate with development teams to integrate security best practices into the SDLC.
• Conduct security code reviews and identify potential vulnerabilities in application code.
• Perform threat modeling on new features and applications to identify potential security risks.
• Develop and maintain secure coding guidelines and standards.
• Implement and manage security testing tools, including SAST, DAST, and IAST.
• Respond to security inquiries from development teams and provide guidance on remediation.
• Automate security checks and processes within CI/CD pipelines.
• Investigate and address security vulnerabilities reported by internal and external parties.
• Stay current with application security threats, trends, and technologies.
• Contribute to the development of security training for developers.
• Assist in incident response activities related to application security.
• Evaluate and recommend application security tools and technologies.

Skills

Java

Python

C#

JavaScript

OWASP Top 10

Security testing

Threat modeling

CI/CD

Analytical thinking

Communication

Education

Bachelor's degree in Computer Science or related field

Tools

SAST

DAST

IAST

Cloud security concepts

Job description

Placements24 is seeking a Senior Application Security Engineer to embed security across the SDLC for our remote engineering team serving Queenstown-area clients.

You will identify vulnerabilities, conduct security code reviews, perform threat modeling, and implement secure coding standards in collaboration with developers. A strong background in OWASP Top 10, SAST/DAST/IAST, cloud security concepts, and excellent communication are essential for success.