Application Security Engineer

Quick Facts

• Industry: Telecommunications
• Work model: 100% remote
• Project language: English
• Duration: 12-month contracts with extensions
• Start: ASAP (1 month notice)

Description

This Application Security Engineer role focuses on strengthening the application security posture by analyzing vulnerabilities, driving remediation, and implementing modern security processes and tools. You will analyze components using DefectDojo, collaborate with development teams, and execute a remediation plan with Tech Leads and security stakeholders. You will also support DevOps by defining secrets management procedures, leveraging GitLab Ultimate security features, deploying SCA via SonarQube, and creating Power BI dashboards for security reporting.

Responsibilities

• Analyze the current security state component by component using DefectDojo
• Collaborate with development teams on vulnerability mitigation
• Present and execute a remediation plan in coordination with Tech Leads and security profiles
• Provide technical support to the DevOps team
• Define and implement secrets management procedures
• Leverage GitLab Ultimate security features
• Contribute to deployment of SCA solutions (SonarQube)
• Set up Power BI dashboards for high-level security reporting
• Produce reports for the security team and developers
• Ensure visibility into the evolution of the security posture

Requirements

• Experience with vulnerability management tools (DefectDojo or equivalent)
• Knowledge of DevSecOps practices and CI/CD pipelines
• Knowledge of secure secrets management procedures
• Proficiency with GitLab and its security features
• Familiarity with SCA and SAST tools (SonarQube)
• Reporting and data visualization skills (Power BI)
• Experience using Jira/Confluence
• Experience with Agile Scrum methodology
• Experience with OWASP security recommendations and NIS2 compliance
• Proven experience with major development languages: Java, Angular, Python, Drupal, etc.

Benefits

• 12-month contract with possible prolongations