Application Security Specialist II

About the role

The Specialist II, Application Security will strengthen application security across the software development lifecycle. You will partner with Security, DevOps and Development teams to embed secure coding practices, automate testing and support timely vulnerability remediation.

Key responsibilities

• Serve as a bridge between Security, DevOps and Development to embed security throughout the SDLC.
• Integrate and maintain security tools (SAST, DAST, SCA) within CI/CD pipelines and drive automation of application security assessments.
• Provide training and guidance on secure coding standards and application security risks.
• Support external exposure management, internet‑facing asset discovery and vulnerability identification.

Required profile

• Experience or working knowledge in application security, DevSecOps or secure SDLC practices.
• Ability to collaborate with Development, DevOps and Security teams in a cross‑functional environment.
• Strong documentation, communication, analytical and problem‑solving skills.

Required skills

• SAST, DAST, SCA tools
• CI/CD pipeline integration
• API security concepts (authentication, authorization, rate limiting, access control)
• Vulnerability management and remediation tracking
• Knowledge of OWASP and NIST security frameworks