Application Security Engineer AppSec
Bjak, United Kingdom
The role
Secure BJAK's web applications, APIs, and backend services, coordinating with mobile stakeholders on cross-platform risks. Embed security into design, development, testing, and release workflows.
What you will do
- Perform security reviews, code reviews, and testing for web applications, APIs, and backend services.
- Identify, prioritize, and help remediate injection, broken access control, authentication, and configuration vulnerabilities.
- Integrate SAST, DAST, software composition analysis, and secrets scanning into CI/CD pipelines.
- Conduct threat modeling and design reviews for features, APIs, third-party integrations, and major changes.
- Coordinate with mobile engineers on cross-platform findings and backend controls protecting native iOS and Android clients.