Deskripsi Pekerjaan
Join EMAPTA's dynamic security team as an Application Security Engineer and become a guardian of modern software infrastructure. This hybrid role empowers you to embed robust security practices directly into the development lifecycle, ensuring our global clients' applications remain resilient against evolving threats. You'll work at the intersection of DevSecOps and cutting-edge security technologies, implementing SAST, DAST, and SCA solutions that proactively identify vulnerabilities before they impact production systems.
As a key member of our rapidly expanding security practice, you'll collaborate with cross-functional teams to architect secure-by-default applications while maintaining velocity in CI/CD pipelines. The position offers a unique opportunity to grow professionally with a company that values innovation and work-life balance, including weekend flexibility. Your expertise will directly influence security strategy for international clients across diverse industries.
Tanggung Jawab
- Implement and maintain SAST/DAST/SCA toolchains within CI/CD pipelines
- Conduct security assessments of web applications and APIs
- Develop custom security automation scripts for vulnerability detection
- Provide security guidance to development teams during code reviews
- Track and remediate security vulnerabilities across the application portfolio
- Stay current with emerging threats and OWASP Top 10 vulnerabilities
- Document security processes and create security awareness materials
Kualifikasi
- Bachelor's degree in Computer Science, Cybersecurity, or related field
- 3+ years of experience in application security (SAST/DAST/SCA)
- Proficiency with at least two major security tools (SonarQube, Veracode, Checkmarx, etc.)
- Strong understanding of CI/CD integration and DevSecOps principles
- Experience with vulnerability management and remediation workflows
- Familiarity with secure coding standards (OWASP, NIST)
- Excellent problem-solving and communication skills