About this role
Job title: Secure Coding / Application Security Engineer (ID: 4143)
As a Secure Coding / Application Security Engineer, you will:
- Maintain and improve application security by implementing secure coding practices and standards.
- Analyse and investigate security vulnerabilities identified through SAST and SCA tools.
- Work with security tools such as Fortify, Nexus Lifecycle, or similar platforms.
- Help development teams understand security findings and implement appropriate fixes.
- Support developers in identifying, resolving, and preventing code vulnerabilities.
- Maintain and improve secure coding standards, guidelines, and best practices.
- Fine-tune security tool rulesets to reduce false positives and improve detection quality.
- Contribute to internal security tools, including repository scanning solutions.
- Explore emerging security risks, including AI-driven threats and agentic development.
- Collaborate with development teams to continuously improve software security.
What You Bring to the Table:
- 4–6 years of overall IT experience in software development, secure coding, or application security.
- Hands-on experience in Secure Coding and Application Security.
- Proficiency in at least one programming language.
- Experience with SAST and SCA security tools such as Fortify, Nexus Lifecycle, or similar tools.
- Knowledge of vulnerability analysis, assessment, and prioritisation.
- Understanding of secure software development practices and security standards.
- Exposure to Microsoft Azure, Agile methodologies, and DevOps practices.
You should possess the ability to:
- Analyse security findings and identify their potential impact.
- Guide developers in understanding and resolving application security vulnerabilities.
- Communicate technical security concepts clearly to development teams.
- Improve security scanning configurations and reduce false-positive findings.
- Work collaboratively with multiple development teams in a large corporate environment.
- Adapt to emerging security challenges, including AI-driven attacks.
- Take a proactive, curious, and practical approach to problem-solving.
- Communicate effectively in English.
What We Bring to the Table:
- An opportunity to work on enterprise-level application security initiatives.
- Exposure to secure software development practices and modern security tools.
- Opportunities to collaborate with experienced development and security teams.
- Hands-on involvement in improving security standards, processes, and tooling.
- An opportunity to contribute to emerging areas of application security.