Senior Application Security Engineer
About the role
The Senior Application Security Engineer will join a US-based client's remote operations team in Sri Lanka. The role involves integrating and automating security tools into CI/CD pipelines, managing bug bounty programs, conducting application security threat hunting, performing penetration testing, code reviews, threat modelling, and collaborating with development teams to improve secure coding practices and application security. Candidates should have strong expertise in Application Security and DevSecOps, hands-on experience with bug bounty platforms, and proficiency in programming or scripting languages. The position also values practical knowledge of cloud and container security, as well as strong communication skills for working with US-based teams.
Must have
- 5+ years of experience in Information Security, with strong expertise in Application Security (AppSec) & DevSecOps.
- Hands-on experience managing bug bounty programs using platforms such as HackerOne or Bugcrowd.
- Proven experience integrating security testing tools into CI/CD pipelines (GitHub Actions, GitLab CI, or Jenkins).
- Strong knowledge of OWASP Top 10, API security, threat modelling, & application vulnerabilities.
- Experience with application security threat hunting & penetration testing.
- Practical knowledge of cloud security (AWS, Azure, or GCP) & container security (Docker/kubernetes).
- Proficiency in at least one programming or scripting language, such as Python, Go, Java, or JavaScript.
- Strong proactive communicator with excellent English communication skills (both written & verbal), with the ability to collaborate directly with US-based teams.
Nice to have
- Familiarity with AI concepts, modern AI-powered development tools, & cloud-based coding environments is highly desirable.
Technologies
- Ai
- Api
- API Security
- AWS
- Azure
- CI/CD
- Cloud
- Cloud Security
- Container Security
- DevSecOps
- Docker
- GCP
- GitHub
- GitHub Actions
- GitLab
- Java
- JavaScript
- Jenkins
- Kubernetes
- OWASP
- Penetration Testing
- Python
- Threat Hunting
Highlights
The role is remote and based in Sri Lanka, working directly with US-based teams. Applications can be submitted via www.cms.lk or by emailing careers@cms.lk with the subject 'Senior Application Security Engineer'. Familiarity with AI concepts and modern AI-powered development tools is highly desirable.
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka