Application Security Engineer, Proactive Security

Description
The Application Security (AppSec) Security Engineer is responsible for conducting security assessments and reviews of applications and services to identify vulnerabilities and ensure adherence to security standards. This role works under the guidance of senior engineers to evaluate system designs, perform threat modeling, and validate that services meet the organization's security bar before launch.

Key job responsibilities
Security Reviews: Conduct security design reviews for new and existing services, evaluating architecture documents, threat models, and system designs for potential security risks
Threat Modeling: Perform threat modeling exercises to identify attack vectors, security weaknesses, and areas of concern in application architectures
Penetration Testing: Execute or coordinate penetration testing activities to validate security controls and identify exploitable vulnerabilities
Finding Management: Document, track, and communicate security ...