Sr. Software Engineer / Application Security Specialist

Edit

• High-Level Role Summary

Title: Sr. Software Engineer / Application Security Specialist

Core Purpose: Act as a bridge between development and security teams, ensuring secure coding practices and improving the organization's application and cloud security posture.

Focus: Hands-on vulnerability analysis, remediation strategies, and security architecture guidance for Java/JavaScript applications and cloud environments (AWS).

• Ideal Candidate Profile

Background: Started as a software engineer (Java preferred), transitioned into application security.

Hybrid Skillset: Strong in secure coding principles + security frameworks + cloud security.

Communication: Able to translate technical security risks into developer-friendly guidance and influence both engineering and security teams.

Leadership: Experience leading small teams (2-3 people) and driving security initiatives.

Tools & Practices:

SonarQube / Sonatype for code vulnerability scanning

Familiar with DevOps/DevSecOps practices

AWS security architecture and certifications

DAST/SaaS tools, running POCs, evaluating vendors

Responsibilities:

Draw flowcharts, architecture diagrams, incident response strategies, and security roadmaps

Evaluate and improve security posture maturity

Work closely with CISO and security team to align development with enterprise security goals

No penetration testing-focus is on code-level security and posture improvement

Bonus: Experience with AI security

• Key Deliverables

Implement and manage secure coding practices across development teams

Conduct code vulnerability analysis and remediation (Java/JavaScript focus)

Create roadmaps and dashboards for security posture improvement

Lead POCs for security tools and recommend best-fit solutions

Collaborate with CISO and security leadership on cloud and application security strategy

• Interview Focus

Past experience bridging development and security

Hands-on remediation examples and artifacts (flowcharts, architecture diagrams, dashboards)

Case studies on security posture improvement

Knowledge of AWS security, DevSecOps, and vulnerability management tools