Application Security Engineer

Key Mandatory Skills

• Application security fundamentals and OWASP Top 10
• Vulnerability assessment, prioritization, remediation tracking and risk-based decision-making
• Security governance, compliance controls and security assessment methodologies, including PSAT
• Microsoft Azure security services, including Defender for Cloud, Key Vault, NSG and WAF
• Identity and access management, privileged-access review and segregation-of-duties concepts
• Security incident response, investigation support and post-incident corrective actions
• Security monitoring tools and concepts, including vulnerability scanners, alerts and SIEM integration
• Strong stakeholder communication, coordination, reporting and security-awareness delivery

Optional / Preferred Skills

• Secure SDLC, threat modelling and secure code-review practices
• DevSecOps practices and security automation
• Cloud-security and application-security architecture experience
• Knowledge of ISO 27001, NIST or similar security frameworks
• Experience supporting audit evidence, risk registers and security KPI dashboards
• Relevant certification such as CISSP, CSSLP, CEH, Security+, SSCP or Microsoft Azure Security Engineer Associate