Application Security Engineer (AWS)

About the Role

A prominent global financial services company is seeking a dedicated Application Security Engineer to join their team in Dublin on a permanent basis. This position requires a candidate who can effectively communicate with developers, excel within a collaborative purple team environment, and has a strong enthusiasm for automation.

Key Responsibilities

• Serve as a security advocate promoting a secure-by-design philosophy throughout the development lifecycle.
• Assist in detecting and analyzing security vulnerabilities in web applications.
• Manage day-to-day operations of application security platforms to ensure comprehensive coverage, compliance adherence, and timely remediation of issues.
• Perform threat modeling exercises and assess application architectural designs for potential security risks.
• Deploy and maintain application security controls along with preventative strategies to avoid security breaches.
• Set up and oversee Static Application Security Testing (SAST) and Software Composition Analysis (SCA) tools across code repositories to uncover source code vulnerabilities.
• Scale and optimize Dynamic Application Security Testing (DAST) automation to broaden testing coverage across applications.
• Execute penetration testing on internally developed software applications.

Required Qualifications and Experience

• Proven expertise in application security with experience in red, blue, or purple team functions.
• Background in software development or contributions to open-source initiatives.
• Hands-on experience with DAST tools such as Burp Suite, OWASP ZAP, or equivalent.
• Familiarity with SAST and SCA platforms including Snyk, Veracode, Checkmarx, or similar products.
• Proficiency in one or more programming languages such as Python, JavaScript, .NET, or Java.
• Proven experience using development tools like GitLab or GitHub, Datadog, Jira, Docker, and integrated development environments (IDEs).

Desirable Skills

• Experience working with cloud services, notably AWS technologies including WAF and Cognito.
• Familiarity with Infrastructure as Code practices, Kubernetes, and containerization.
• Knowledge of authentication protocols such as OpenID Connect and OAuth, and identity provider configuration.