Application Security Engineer

JOB SUMMARYWe are looking for an experienced Application Security Engineer with strong .NET Framework expertise to join our Productivity and Collaboration team. This role will focus on strengthening the security, quality, and resilience of applications and services. The successful candidate will be responsible for reviewing, hardening, and improving code within internal .NET repositories to meet high secure engineering standards. You will be involved in all phases of the software development lifecycle and collaborate with other team members to deliver value to stakeholders.
Key Responsibilities
Review, harden, and improve code across internal .NET Framework applications and services.
Build and run automation in PowerShell to analyze, improve, and harden code across internal repositories.
Partner with development squads to embed secure coding practices throughout the software development lifecycle.
Strengthen existing application features and remediate findings raised through code review and security tooling.
Enhance the team’s use of automated security testing within Continuous Integration/Continuous Delivery pipelines.
Perform code reviews and contribute to secure-by-design standards, patterns, and guidance.
Support and improve the team’s adoption of agile principles, participating in sprint retrospectives and demos as needed.
Required Qualifications
8+ years or more of software development experience.
Experience writing PowerShell scripts.
Strong hands‑on expertise with the .NET Framework (C#, ASP.NET).
Demonstrable application security experience.
Experience with secure coding, code review, and remediation.
Familiarity with recognized application security standards (e.G., OWASP).
Hands‑on experience with Continuous Integration/Continuous Delivery.
Hands‑on experience with Agile development (Scrum, Kanban).
Understanding of SDLC and secure CI/CD processes.
Hands‑on experience with Jira or other issue‑tracking systems.
Preferred Qualifications
.NET Core experience.
Experience with Static and dynamic application security testing (SAST/DAST) tools.
Threat modeling experience.
SQL and Database Design experience.
#J-18808-Ljbffr