Application Security Engineer

ErthDev; USA; Remote; USD 55.000 - 83.000; Teilzeit

Benefits dieser Stelle

Paid leave

Performance bonuses

Learning and certification support

Conference opportunities

Equipment and internet support

Medical insurance

Mentorship

Zusammenfassung

ErthDev is seeking a security-focused engineer to help engineering teams build secure software throughout the development lifecycle, including threat modeling, design reviews, and practical remediation to address risk during development.

You will integrate security into design and code reviews, support CI/CD tooling, and collaborate with developers to prioritize findings by risk. The role is part-time and fully remote, with flexible hours and occasional Cairo office access if needed.

Qualifikationen

• Strong understanding of web and API security.
• Experience with secure development practices and common vulnerability types.
• Familiarity with OWASP guidance.
• Ability to review code and architecture and explain practical remediation to developers.
• Understanding of security tooling in CI/CD workflows.
• Ability to prioritize findings by risk and communicate clearly with engineering teams.

Aufgaben

• Integrate security practices into application design and development workflows.
• Conduct application security reviews and threat modeling.
• Review authentication, authorization, and data-handling designs for risk.
• Help developers remediate vulnerabilities and improve secure coding guidance and checklists.
• Support controls for dependencies, secrets, and continuous integration pipelines.
• Assess third-party and integration risks, collaborate with penetration testers, and help teams prepare for application security incidents.

Jobbeschreibung

Role overview

Help engineering teams build secure software throughout the development lifecycle. The work spans secure design, threat modeling, code and architecture reviews, and practical remediation, with the aim of addressing risk as part of normal engineering rather than only during a final audit.

Responsibilities

• Integrate security practices into application design and development workflows.
• Conduct application security reviews and threat modeling.
• Review authentication, authorization, and data-handling designs for risk.
• Help developers remediate vulnerabilities and improve secure coding guidance and checklists.
• Support controls for dependencies, secrets, and continuous integration pipelines.
• Assess third-party and integration risks, collaborate with penetration testers, and help teams prepare for application security incidents.

Requirements

• Strong understanding of web and API security.
• Experience with secure development practices and common vulnerability types.
• Familiarity with OWASP guidance.
• Ability to review code and architecture and explain practical remediation to developers.
• Understanding of security tooling in CI/CD workflows.
• Ability to prioritize findings by risk and communicate clearly with engineering teams.

Nice to have

• Experience with static or dynamic application security testing, dependency scanning, cloud security fundamentals, identity systems, or secure software development lifecycle programs.

Benefits and work setup

Part-time, fully remote work from Egypt, with flexible hours and collaboration overlap. Cairo office access is available when needed.

• Paid annual and sick leave
• Performance bonuses
• Annual salary reviews
• Learning and certification support
• Conference opportunities
• Equipment and internet support
• Medical insurance
• Mentorship
• Work across projects in different industries