Position: Web Application Security Engineer
Category: Security
English level: intermediate
Years of experience: 9


Application Security Engineer

Experience in IT 9 years out of them 4 years in cyber security area working as Application Security Engineer and 5 years as Quality Assurance Engineer.

As Application Security Engineer my main responsibilities are communication with customers, defining security testing goals, creating security testing plans, defining security requirements, performing vulnerability assessment for WEB/API/Mobile/Infrastructure, running vulnerabilities scanners DAST/SAST/IAST and do false-positive analysis of the
results, writing security reports with recommendation how to fix or prevent found vulnerabilities, demonstration of results for customers. I am able to work as a single engineer or team member.

Good writing and verbal communication skills. English level is B1.

Responsibilities:

• Performing scope definition and estimation for security testing
• Vulnerability assessment (Gray/Black/White box) Web/API/Mobile with OWASP WTG, MTG, Top-10
• Performing vulnerability scanning with SAST / DAST /IAST tools, false-positive analysis
• Performing OSINT checks and Social Engineering tests
• Participation in project preparation with compliance GDPR, HIPAA
• Work with 3rd party pentest service providers
• Providing security consulting for different projects
• Customer consulting and support
• Mentoring junior security engineers for the security team
• Writing security guides and articles for internal use
• Perform internal security training and lectures for the QA engineers & security team