Application Security Engineer

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/8078jb

Overview
In this role you will strengthen the security of web apps, cloud environments, and containerized platforms in a client-facing setting.
You will work within cross-functional teams to perform vulnerability assessments, penetration testing, and threat modeling, shaping risk-informed security improvements.
You'll contribute to secure development through code reviews and security testing, and you'll communicate findings through technical reports.
The position offers growth through hands-on experiences, certifications, and direct client interaction in a hybrid work setup.
Retribuzione / Benefits
Hybrid working model
training and certifications
permanent contract
career development opportunities
interaction with management and clients
Responsabilità
Perform vulnerability assessments and penetration testing on web applications, IT infrastructures, cloud environments, and Kubernetes/AKS containers




Support reporting and compliance via Technical Deep Dive Reports and vulnerability classification using CVSS v4.0, MITRE ATT&CK;, and OWASP; verify remediation effectiveness
Contribute to threat modeling using STRIDE and produce risk assessment documentation
Analyze source code with SAST tools and manual review to identify defects and security weaknesses
Requisiti fondamentali
Practical knowledge of OWASP and CWE vulnerability categories
Familiarity with Burp Suite, OWASP ZAP, Nessus, Nmap; Trivy, Kube-bench, Prowler for container/cloud security auditing
Basic programming/scripting skills (Python, Bash, Go) or knowledge of major web/object-oriented languages
Bachelor in Computer Science
Master in Computer Science or Computer Engineering is acceptable as alternative
Burp Suite
OWASP ZAP
Nessus
Nmap
Trivy
Kube-bench

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/8078jb