Application Security Engineer T2LTYH (m/f/d)

Overview

Application Security Engineer

Responsibilities

• Deliver ongoing technical support and mentorship on DevSecOps-related questions and issues
• Conduct workshops and knowledge transfer sessions on operational aspects of the DevSecOps lifecycle

• Security Vulnerability Management

• Implement proof-of-concept (POC) implementations across 5 different application types based on lessons learned
• Configure CI/CD pipelines to provide automated, actionable feedback on identified vulnerabilities
• Conduct vulnerability assessment and remediation guidance directly within development environments
• Work with development teams to interpret DevSecOps Toolset results and address identified security issues
• Document and communicate remediation pathways to relevant stakeholders

• Documentation & Knowledge Management

• Create and maintain comprehensive troubleshooting documentation and repair guides
• Develop standard operating procedures for tool deployment, configuration, and maintenance
• Prepare and deliver deliverables clustered into MVP branches
• Ensure continuous refinement of documentation based on implementation experience and stakeholder feedback
• Maintain current knowledge of tool capabilities and security best practices

• Collaboration & Governance

• Support Enterprise Architecture Review and DevSecOps governance processes
• Participate in security capability and skills mapping activities
• Collaborate with security architects on DevSecOps roadmap implementation
• Coordinate with multiple teams to ensure consistent DevSecOps practices

Qualifications & Experience

• Minimum 6+ years in cybersecurity, application security, or DevOps engineering roles
• 3+ years hands‑on experience with DevSecOps toolchain implementation and management
• Demonstrated expertise with at least three of the following:
• – SAST tools
• – DAST tools
• – SCA tools
• – Container security
• – API security platforms
• – Secrets management solutions
• Strong knowledge of application vulnerabilities (OWASP Top 10)
• Experience with CI/CD pipeline configuration and integrations
• Proficiency with containerization technologies
• Understanding of network security concepts and web application firewalls (WAF)
• Linux/Unix system administration capabilities

Halian Group