DevSecOps / Application Security Engineer

Required Qualifications

• Hands-on experience in DevSecOps, Application Security, Product Security, or Security Engineering.
• Strong experience with GitHub and GitLab in enterprise software development environments.
• Practical experience with vulnerability management, security patching, remediation, and risk prioritization.
• Experience securing CI/CD pipelines and integrating security scanning into development workflows.
• Knowledge of SAST, DAST, SCA, dependency scanning, and secrets scanning.
• Familiarity with application security vulnerabilities, OWASP principles, and secure coding practices.
• Experience using application security tools such as Snyk, Veracode, Checkmarx, SonarQube, Black Duck, Mend, or similar platforms.
• Strong troubleshooting, communication, and cross-functional collaboration skills.
• Ability to work independently, prioritize urgent security issues, and drive remediation activities to completion.