Job Summary
The Application Security Engineer designs, implements, and operates security controls that protect enterprise applications and services on a scale. The role partners with application owners, identity, cloud, and network teams to prevent, detect, and remediate risks across web apps, APIs, and SaaS solutions while advancing policies, standards, and automation aligned to Zero Trust principles.
Key Responsibilities
Deploy, configure, and operate controls across WAF, API security, bot/DDoS mitigation, identity/MFA, egress/DLP/SSL inspection, and SaaS security posture management (SSPM).Triage and remediate application and SaaS vulnerabilities/misconfigurations, drive hardening and exception governance.Build and maintain security standards, procedures, and baseline policies for internet-facing services; review and approve exceptions.Integrate security checks and guardrails into CI/CD and change processes; ensur...