Application Security Engineer – Vulnerability Discovery

About the role

This position is focused on strengthening application security by discovering, analysing, and reducing vulnerabilities across modern software environments. You will work closely with engineering and product teams to embed secure development practices throughout the software development lifecycle.

Key responsibilities

• Tri­age, validate, prioritize and manage security vulnerabilities identified through manual reviews, automated tools, bug‑bounty programs and AI‑assisted platforms.
• Partner with software engineering and product teams to drive remediation, provide actionable security guidance and ensure timely resolution based on risk.
• Review security‑related pull requests, source‑code changes and development workflows to spot vulnerabilities and recommend secure implementations.
• Analyse findings from AI‑powered security tools, reduce false positives and improve detection workflows.
• Participate in security incident response, investigations and root‑cause analysis for application‑level issues.
• Support and enhance secure SDLC practices across engineering organisations.
• Develop security tooling, automation and workflows to improve coverage and operational efficiency.
• Configure, optimise and maintain vulnerability‑scanning platforms, including policies, schedules and reporting.
• Track remediation progress, security metrics and risk‑reduction initiatives, providing visibility to stakeholders.
• Contribute to on‑call rotation for security triage, code reviews and application‑security requests.

Required profile

• Proven experience as an application security professional with a proactive mindset.
• Strong ability to collaborate effectively with development and product teams.
• Experience driving security improvements at scale in modern software environments.

Required skills

• Vulnerability assessment and management.
• Secure coding practices.
• Security automation and tooling development.
• Application security testing (manual and automated).
• Incident response and root‑cause analysis.
• Experience with AI‑assisted security platforms and vulnerability scanning solutions.