Application Security Engineer

We are seeking an experienced Application Security Engineer to join our team. This role will collaborate with other IT professionals as part of our security engineering team to anticipate and correct vulnerabilities in both client-facing and internal applications. The ideal candidate will not just be an expert in application security but have the expertise and capability to provide technical leadership and guidance on security best practices to the entire development team.

Perform proof of concept testing for new security products

Evaluate new technologies and tools that will impact organization security.

Analyze proprietary and third-party software to identify and address security concerns.

Assess the organization’s security architecture and scan code to identify vulnerabilities.

Guide development teams on defensive coding and remediation techniques

Provide security training and guidance for developer teams

Review existing applications and software to identify security improvements

Install, configure, and use new security tools implemented by the organization

Develop and refine app and product security best practices

Maintain documentation of application security controls

Conduct penetration testing and provide retesting support

Serve as a subject matter expert on common attack vectors and application security for developer teams and organization leadership

4+ years of experience in an IT role, preferably in a security team

Experience assessing vulnerabilities in business software and systems.

Experience establishing software development policies.

Experience with application design, risk assessment, and penetration testing

Experience performing blackbox, greybox, and whitebox security assessments of applications using HTTP and/or proprietary protocols

Container DevSecOps experience

Proficient in at least one programming language such as Java, .NET, or Python

Deep knowledge of common security vulnerabilities

Knowledge of application architectural patterns (MVC, Microservices, etc.)

Knowledge of secure development lifecycle principles

Strong problem-solving and analytical skills

Education and Experience required: Bachelor’s degree in engineering, computer science, information security, or a related field

Prefer Qualifications

Competitive salary

13th salary and performance bonus

15 days Annual Leave and 5 days Sick Leave

Healthcare Insurance for employee

Laptop Provided

Career path, training courses

Other benefits of Company will be share details in the offer stage

PEGASI – IT Recruitment Consultancy | Email: recruit@pegasi.com.vn | Tel: +84 28 3622 8666