Application Security Engineer

📋 Description

• Integrate security controls into Rubrik's secure SDLC and collaborate with Engineering.
• Perform security assessments of applications using automated and manual testing.
• Analyze vulnerabilities and provide high-fidelity findings to Engineering.
• Help implement shift-left strategies to prevent vulnerabilities earlier in the SDLC.
• Collect and report key application security metrics.
• Analyze and harden applications, automation, and deployment processes.
• Participate in security design reviews and threat modeling.
• Document security guidance and standards with teams.

🎯 Requirements

• Bachelor’s degree in CS/IT or related field.
• 3+ years in application security; threat modeling, secure code review, vulnerability management, and pentesting.
• Knowledge of FedRAMP, SOC2, ISO 27001 etc.
• Knowledge of web, application, and cloud attack vectors.
• Proficiency in Python, Go, Scala, C/C++, JavaScript/TypeScript.
• CI/CD, Kubernetes, Docker, and microservices.
• Experience with AWS, GCP, or Azure.
• Understanding of application security maturity models.