Position: Application Security Engineer
Category: Security
English level: upper
Years of experience: 5


As an Application Security engineer I am involved in the following processes

1. Vulnerability management
- Manual security code review
- Manual dynamic security testing
- Configuration of automated security testing
- Consulting development teams on the implementation of security fixes

2. Risk management
- Analysis of application's threat surface
- Assessment of risks caused by the vulnerabilities found
- Providing recommendations on vulnerability remediation priorities

3. Secure software development lifecycle
- Conducting trainings for development teams on secure coding practices
- Configuration of automated security testing
- Conducting security audits of CI/CD and cloud infrastructure

4. Incident response
- Handling security incidents on production software instances