Application Security Engineer

The Application Security Engineer at GhangorCloud will be responsible for ensuring the security of the company's software applications and services. This individual will lead efforts to identify and mitigate security vulnerabilities across applications, design and implement security solutions, and work closely with development teams to ensure security best practices are integrated into the software development lifecycle. The role requires strong expertise in application security methodologies, as well as an ability to stay updated on the latest security threats and technologies.

Key Responsibilities:

• Security Assessment & Analysis: Conduct regular security assessments and vulnerability scans of applications, identifying potential threats and weaknesses.
• Secure Software Development: Collaborate with software development teams to integrate security best practices throughout the software development lifecycle (SDLC).
• Penetration Testing: Perform penetration testing and code reviews to identify and address security vulnerabilities in applications.
• Incident Response: Respond to security incidents related to applications, conducting root cause analysis and implementing preventative measures.
• Security Solutions Design: Design and implement security controls and solutions to mitigate identified vulnerabilities and improve overall application security.
• Compliance & Standards: Ensure applications comply with relevant industry security standards and regulations (e.g., OWASP, NIST, GDPR).
• Training & Awareness: Provide security training and guidance to developers, helping them understand secure coding practices and how to prevent vulnerabilities.
• Security Documentation: Create and maintain comprehensive documentation related to security policies, procedures, and incident reports.
• Stay Current: Stay up to date with emerging security threats, tools, and technologies to ensure that GhangorCloud's applications are always protected against the latest risks.

Qualifications:

• Bachelor's degree in Computer Science, Information Security, or a related field (Master's degree preferred).
• 5+ years of experience in application security, with a focus on securing web and cloud-based applications.
• Expertise in performing vulnerability assessments, penetration testing, and code reviews.
• Strong knowledge of security frameworks and methodologies (e.g., OWASP, SANS).
• Experience with secure software development practices (e.g., threat modeling, secure coding, etc.).
• Familiarity with cloud security, particularly in AWS, Azure, or similar environments.
• Proficiency with security tools such as static code analysis tools, web application firewalls (WAFs), and vulnerability scanning tools.
• Strong analytical and problem-solving skills, with the ability to quickly identify and mitigate security threats.
• Excellent communication skills and the ability to collaborate with cross-functional teams.

Skills and Competencies:

• Security Expertise: In-depth knowledge of application security concepts, tools, and best practices.
• Collaboration & Communication: Ability to work closely with developers, engineers, and business stakeholders to ensure security requirements are met.
• Problem Solving: Strong analytical skills to identify and resolve complex security issues.
• Proactive Learning: Continuous learning mindset to stay ahead of evolving security threats.

Working Conditions:

• Hybrid work model with remote work flexibility, depending on project needs and requirements.
• Occasional travel for training, conferences, or on-site meetings with clients or teams may be required.