Application Security Engineer

PROJECT INFORMATION:

Industry: telecommunication

Remote work: 100%

Project language: English

Business trips: n/a

Project length: 12 months contracts + prolongations.

Start: ASAP / 1 month notice

Assignment type: B2B

Summary: This role aims to strengthen the organization's application security posture by analyzing existing vulnerabilities, driving their remediation, and implementing modern security processes and tools. Technical Environment: DefectDojo, GitLab Ultimate, SonarQube / SCA, Power BI.

Responsibilities:

• Analyze the current state component by component using DefectDojo.
• Collaborate with development teams on vulnerability mitigation.
• Present a remediation plan in coordination with Tech Leads and security profiles.
• Drive the execution of the remediation plan.
• Provide technical support to the DevOps team.
• Define and implement secrets management procedures.
• Leverage GitLab Ultimate security features.
• Contribute to the deployment of SCA solutions (SonarQube).
• Set up Power BI dashboards for high-level security reporting.
• Produce reports for the security team and developers.
• Ensure visibility on the evolution of the security posture.

Must Haves:

• Experience with vulnerability management tools (DefectDojo or equivalent).
• Knowledge of DevSecOps practices and CI/CD pipelines.
• Knowledge of secure secrets management procedures.
• Proficiency with GitLab and its security features.
• Familiarity with SCA and SAST tools (SonarQube).
• Reporting and data visualization skills (Power BI).
• Experience using Jira/Confluence.
• Experience with Agile Scrum methodology.
• Experience with OWASP security recommendations and NIS2 compliance.
• Proven experience with major development languages: Java, Angular, Python, Drupal, etc.

Nice to Haves:

• Strong analytical and synthesis skills.
• Ability to collaborate with diverse technical teams.
• Ability to communicate security topics to non-experts.
• Autonomy and proactivity.