Application Security

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/8nabmy

We are looking for an experienced Application Security & Cloud Security Engineer to support a large-scale cloud migration project involving approximately 30 legacy applications moving from on-premises environments to Amazon Web Services (AWS). The project involves AI-assisted code conversion, making application security reviews and secure software development practices essential throughout the migration process. In this role, you will support the implementation of the client's Secure Software Development Framework (SSDF), perform security checkpoint reviews, assess vulnerabilities and cloud misconfigurations, and guide development teams in meeting application and cloud security standards before production deployment. Project Details
• Start Date: January 2027
• Duration: Up to 12 months
• Workload: Full-time (approximately 40 hours per week)
• Work Model: Remote LATAM, with access to the client's systems provided by the client

Key Responsibilities
Application Security & SSDF
• Support the implementation, refinement, and adoption of the client's Secure Software Development Framework (SSDF).
• Conduct security checkpoint reviews throughout application migration and development workflows.
• Review AI-assisted code conversions and evaluate potential security risks before production deployment.
• Guide development teams in applying secure coding practices, application security requirements, and architectural standards.
• Provide guidance on application security architecture and threat modeling. AWS Cloud Security & Vulnerability Management
• Assess the security of applications and cloud environments deployed on AWS.
• Identify, analyze, and help prioritize vulnerabilities, security findings, and cloud misconfigurations.




• Triage security scanner results, identify false positives, and provide actionable remediation recommendations.
• Support remediation activities and help teams address security gaps before production releases.
• Incorporate data security requirements into application and cloud security reviews. Required Qualifications
• Strong experience in Application Security (AppSec), including application security architecture, threat modeling, secure coding, and secure software development practices.
• Hands-on experience securing applications and cloud environments on Amazon Web Services (AWS).
• Experience implementing or supporting a Secure Software Development Framework (SSDF) or similar secure SDLC processes.
• Practical experience with vulnerability assessment, security scanner findings, false-positive triage, and remediation guidance.
• Understanding of cloud security controls, application architecture, and security misconfigurations.
• Familiarity with AI-assisted software development, AI-generated code security reviews, or AI-related secure development lifecycle practices.
• Excellent communication, documentation, mentoring, and stakeholder management skills.
• Ability to collaborate effectively with distributed engineering teams and external vendors. Nice-to-Have Skills
• Experience supporting large-scale application modernization or cloud migration projects.
• Experience reviewing AI-converted code and identifying security risks associated with AI-assisted development.
• Familiarity with legacy enterprise integration technologies, including IBM App Connect Enterprise and ESQL.
• Experience creating security governance documentation, operational runbooks, and developer training materials.

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/8nabmy