Cyber Security Engineer – Application Security – 15078

Assignment Description:

• We are looking for a Cyber Security Engineer to join our team.

What you will work on:

• Promote secure coding practices through developer training, guidelines, and security documentation
• Review application source code to identify vulnerabilities and provide clear, actionable remediation feedback
• Design and implement security architecture, controls, and guardrails for new and existing applications
• Perform security assessments including threat modeling, attack surface analysis, and risk assessments
• Implement and maintain application security tools to automate security testing across the SDLC
• Support application security incident response, including root cause analysis and remediation activities
• Collaborate closely with development, DevOps, and IT security teams to embed security into delivery pipelines
• Monitor security metrics and contribute to reporting on security posture, risks, and compliance status
• Communicate complex security concepts clearly to both technical and non-technical stakeholders

What you bring:

• Experience working with programming languages such as C#, Rust, Python, or JavaScript
• Strong understanding of application security principles and secure coding best practices
• Solid knowledge of security concepts including network security, encryption, identity and access management
• Hands-on experience with application security tools and processes such as SAST, DAST, SCA, and vulnerability scanning
• Practical experience with tools such as SonarQube, OWASP ZAP, Nessus, Invicti, or similar
• Knowledge of established security frameworks and standards including OWASP Top Ten, NIST, IEC 62443, and ISO 27001
• Experience working with cloud platforms such as AWS, Azure, or Google Cloud and their native security services
• Hands-on experience with containerization and orchestration technologies, including Docker and Kubernetes
• Strong communication skills with the ability to explain security risks and solutions to non-technical audiences
• Relevant security certifications such as CEH, CISSP, or OSCP are considered a plus

If this sounds interesting, please send your CV to