CivicPlus

Application Engineer

• Perform security code reviews, threat modeling, and architecture reviews across development projects as part of a secure SDLC
• Collaborate with development teams to integrate secure design, secure coding standards, and security controls across the SDLC
• Identify, track, and validate vulnerabilities and security defects from security testing and scanning
• Partner with development teams to prioritize remediation within compliance timeline requirements
• Coordinate external, independent penetration testing of production environments
• Lead application security testing, including SAST, DAST, and IAST
• Serve as a subject matter expert on application security vulnerabilities, including the OWASP Top 10, and emerging threats

Application Security Engineer