We’re looking for an application security engineer to help run and scale our day-to-day AppSec program. You will help us on our journey to operating our scanning tools, triaging findings, and working directly with engineering teams to get vulnerabilities fixed.
What you’ll do & how you’ll make your mark.
- Operate and maintain AppSec scanning tools (SAST, SCA, secrets scanning, container scanning) across the SDLC
- Triage findings, validate true positives, and prioritize remediation with engineering teams
- Track vulnerabilities through to closure and monitor SLA compliance
- Support onboarding of new repositories/services into the security tooling
- Contribute to internal documentation, runbooks, and process improvements
- Assist with basic scripting/automation tasks under guidance from senior team members