Senior Application Security Engineer
About the role
A US-based client is looking for a Senior Application Security Engineer to join its remote operations team in Sri Lanka. The role involves integrating and automating security tools into CI/CD pipelines, managing bug bounty programs, conducting application security threat hunting, performing penetration testing, code reviews, and collaborating with development teams to enhance secure coding practices. Candidates should have significant experience in Information Security, particularly in Application Security and DevSecOps, and be comfortable working with cloud and container security technologies.
Must have
- 5+ years of experience in Information Security, with strong expertise in Application Security (AppSec) & DevSecOps.
- Hands-on experience managing bug bounty programs using platforms such as HackerOne or Bugcrowd.
- Proven experience integrating security testing tools into CI/CD pipelines (GitHub Actions, GitLab Cl, or Jenkins).
- Strong knowledge of OWASP Top 10, API security, threat modelling, & application vulnerabilities.
- Experience with application security threat hunting & penetration testing.
- Practical knowledge of cloud security (AWS, Azure, or GCP) & container security (Docker/Kubernetes).
- Proficiency in at least one programming or scripting language, such as Python, Go, Java, or JavaScript.
- Strong proactive communicator with excellent English communication skills (both written & verbal), with the ability to collaborate directly with US-based teams.
Nice to have
- Familiarity with Al concepts, modern Al-powered development tools, & cloud-based coding environments is highly desirable.
Technologies
- Api
- API Security
- AWS
- Azure
- CI/CD
- Cloud
- Cloud Security
- Container Security
- DAST
- DevSecOps
- Docker
- GCP
- GitHub
- GitHub Actions
- GitLab
- Java
- JavaScript
- Jenkins
- Kubernetes
- OWASP
- Penetration Testing
- Python
- SAST
- Threat Hunting
Highlights
The position is remote but specifically for candidates based in Sri Lanka. The role requires direct collaboration with US-based teams and excellent English communication skills.
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka