Kerja Sepenuh Masa, Senior Engineer - Application Security di Lavu Tech Solutions Federal Territory - Maukerja

Looking for someone available locally only.

Key Responsibilities

• Integrate security requirements, controls, and testing into the Software Development Life Cycle (SDLC) and DevSecOps pipelines

• Manage and support application security tools, including SAST, DAST, SCA, secret scanning, and container security scanning solutions

• Conduct web application and API security assessments to identify vulnerabilities and potential risks

• Review application architectures and designs, recommending secure design practices and improvements

• Establish secure coding standards, guidelines, and developer security awareness initiatives

• Validate security controls before production releases and support secure application deployments

• Perform vulnerability triage, validate false positives, and track remediation activities

• Monitor emerging application security threats and recommend improvements to security practices

• Collaborate with developers, DevOps engineers, cloud teams, and project stakeholders throughout the SDLC

Specifications

• 4+ years of relevant experience in application security, DevSecOps, or software security engineering

• Strong understanding of OWASP standards, secure coding practices, and common application vulnerabilities

• Hands-on experience with SAST, DAST, SCA, secret scanning, and container security tools

• Familiarity with application and API security testing tools such as Burp Suite

• Understanding of CI/CD pipelines, software development processes, and security integration throughout the SDLC

• Ability to assess security risks, analyze vulnerabilities, and provide practical remediation recommendations

• Strong analytical, problem-solving, communication, and collaboration skills

• Relevant application security or cybersecurity certifications are advantageous