Senior Application Security Engineer
About the role
The Senior Application Security Engineer will join a US-based client's remote operations team in Sri Lanka. The role involves integrating and automating security tools into CI/CD pipelines, managing bug bounty programs, conducting application security threat hunting, performing penetration testing, code reviews, and collaborating with development teams to enhance secure coding practices. Candidates should have significant experience in Information Security, particularly Application Security and DevSecOps, and be proficient in integrating security tools, managing bug bounty programs, and working with cloud and container security. The position requires strong communication skills for direct collaboration with US-based teams.
Must have
- 5+ years of experience in Information Security, with strong expertise in Application Security (AppSec) & DevSecOps.
- Hands-on experience managing bug bounty programs using platforms such as HackerOne or Bugcrowd.
- Proven experience integrating security testing tools into CI/CD pipelines (GitHub Actions, GitLab CI, or Jenkins).
- Strong knowledge of OWASP Top 10, API security, threat modelling, & application vulnerabilities.
- Experience with application security threat hunting & penetration testing. Practical knowledge of cloud security (AWS, Azure, or GCP) & container security (Docker/Kubernetes).
- Proficiency in at least one programming or scripting language, such as Python, Go, Java, or JavaScript.
- Strong proactive communicator with excellent English communication skills (both written & verbal), with the ability to collaborate directly with US-based teams.
Nice to have
- Familiarity with AI concepts, modern AI-powered development tools, & cloud-based coding environments is highly desirable.
Technologies
- API Security
- AWS
- Azure
- CI/CD
- Cloud Security
- Container Security
- DAST
- DevSecOps
- Docker
- GCP
- GitHub
- GitHub Actions
- GitLab
- Java
- JavaScript
- Jenkins
- Kubernetes
- OWASP
- Penetration Testing
- Python
- SAST
- Threat Hunting
Highlights
The role is remote but based in Sri Lanka, working with a US-based client. Strong English communication skills are required for collaboration with US teams.
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka