Application Security Engineer

At Capgemini Engineering, the world leader in engineering services, we bring together a global team of engineers, scientists, and architects to help the world’s most innovative companies unleash their potential. From autonomous cars to life-saving robots, our digital and software technology experts think outside the box as they provide unique R&D and engineering services across all industries. Join us for a career full of opportunities. Where you can make a difference. Where no two days are the same.

Job Description As an Application Security Engineer, your responsibilities will include:

• Security Engineering

• Collaborate with development teams, Site Reliability Engineering, and other stakeholders to strengthen the adoption of security best practices throughout the SDLC.

• Independently identify security improvements and implement them.

• Vulnerability Management:

• Implement, manage, and automate vulnerability management processes.

• Prioritize and remediate vulnerabilities discovered through internal scans, penetration tests, and bug bounties.

• Security Assessments

• Conduct threat modeling, code audits, design reviews with engineers to ensure effective and secure development.

• Collaborate in providing actionable recommendations to find workable solutions.

• Threat Hunting:

• Establish a threat hunting capability and automate where appropriate.

• Enhance logging capabilities related to security events.

• Security Tools Integration and Management:

• Integrate and manage dynamic and static code analysis tools.

• Ensure operation of security tools within the development pipeline.

Skills that will help you thrive in this role:

• 4+ years experience in secure development or application security.
• Deep knowledge of security concepts such as authentication, web architecture, etc.
• Experience with Nodejs, Go, etc.
• Experience running bug-bounty, penetration testing, vulnerability scanning programs.
• Experience setting up and maintaining SAST, DAST, IAST and SCA tooling
• Experience using assessment tools such as Burp, ZAP, Qualys, Nessus, etc.
• Experience building and maintaining WAF solutions.
• Familiarity with industry security practices, standards, and regulations such as FedRAMP, SOC2, HIPAA, etc. a plus.
• Familiarity with GCP/AWS and Kubernetes infrastructure security a plus.
• Self-motivated and goal driven, able to find what needs to be done and do it.

qualities that will set you up for success:

• Thinking outside of the box to respectfully challenge your teammates and managers in the pursuit of excellence
• Strong sense of urgency with an action-oriented mindset
• Able to collaborate and adapt to shifting priorities as business needs evolve
• Comfortable with asynchronous communication including slack, email, zoom, etc.

What you will have working here

• We care about all our employees and want them to feel as comfortable as possible. That's why we offer health insurance from the first days, regardless of the probationary period.
• The Gift from the Company - Christmas holidays from December 25 to December 31.
• Cooperation with Superhumans center and Veteran HUB. Capgemini Engineering has supported the launch of psychological rehabilitation department of Superhumans. Our team also donated over UAH 500 000 prosthetics for three Ukrainian defenders. Currently, we support psychological counseling provided by the Veteran Hub, and we have implemented an internal policy making the company friendly to military and veterans with the assistance of the Hub.

Capgemini is a global business and technology transformation partner, helping organizations to accelerate their dual transition to a digital and sustainable world, while creating tangible impact for enterprises and society. It is a responsible and diverse group of 340,000 team members in more than 50 countries. With its strong over 55-year heritage, Capgemini is trusted by its clients to unlock the value of technology to address the entire breadth of their business needs. It delivers end-to-end services and solutions leveraging strengths from strategy and design to engineering, all fueled by its market leading capabilities in AI, generative AI, cloud and data, combined with its deep industry expertise and partner ecosystem.