Job Description

We are seeking an experienced Senior Application Security Engineer with a strong focus on DevSecOps and penetration testing. The successful candidate will embed security into our GitLab CI/CD pipelines, perform hands-on testing of web applications, APIs, and cloud infrastructure, and work closely with development teams to identify and fix vulnerabilities early in the software development lifecycle.

Key Responsibilities

• Design and embed security gates in GitLab CI/CD pipelines, including SAST, DAST, dependency scanning, and secret detection.

• Conduct hands-on penetration testing of web applications, APIs, and cloud infrastructure.

• Manage the vulnerability remediation lifecycle: triage, prioritization, tracking, and verification of fixes with application owners.

• Develop automation scripts (Python, Bash, or Go) for vulnerability scanning, orchestration, and reporting.

• Perform secure code reviews and threat