Application Security Engineer

Robusta Studio

Role Objective:

The Security Engineer will be responsible for supporting the secure design, development, and deployment of applications by identifying vulnerabilities, performing code and security reviews, and collaborating with engineering teams to embed security throughout the software development lifecycle. They will also contribute to threat modeling, security testing, and the continuous improvement of application security practices and tools.

Key Roles & Responsibilities:

• Perform basic application security testing (SAST, DAST) using tools like Burp Suite, SonarQube, or Veracode.
• Perform manual and automated code reviews, vulnerability assessments, and penetration testing for web and mobile applications.
• Collaborate with developers to identify and remediate security issues during the SDLC (Secure Development Lifecycle).
• Analyze findings from SAST, DAST, and SCA tools and guide teams on resolution.
• Participate in threat modeling and design review sessions to identify potential security risks.
• Assist in maintaining and evolving secure coding guidelines and developer training.
• Work with QA and DevOps teams to integrate security tools into CI/CD pipelines.
• Stay current on emerging threats, attack techniques, and security trends.
• Document technical security findings, track remediation, and contribute to risk assessments.
• Support application security awareness efforts across engineering teams.