Application Security Engineer

About the role

Sequoia is seeking an Application Security Engineer to embed security expertise throughout the software development lifecycle and drive the Application Security Analytics practice. The role involves validating web applications, threat modelling, penetration testing and improving the overall security posture.

Key responsibilities

• Conduct application security reviews and mobile security assessments to identify vulnerabilities.
• Perform threat modelling, penetration testing and static/dynamic analysis using OWASP‑based tools.
• Develop security guidance documentation, training material and automation tools for development teams.
• Deliver security metrics and reports to stakeholders and support recruiting and administrative activities.

Required profile

• 5+ years of experience in application development, security or related fields.
• 3+ years of programming experience in languages such as Python, Ruby, Go, Swift, Java.Net or C++.
• 2+ years of experience with threat modelling, secure coding, identity management, cryptography or network security.
• Bachelor’s degree in Computer Science or equivalent.

Required skills

• Application security technologies, OWASP Top 10, static and dynamic testing tools.
• Component analysis tools (OWASP Dependency‑Check, Bytesafe, Patton, PHP Security Checker).
• Penetration testing tools (Nmap, NetCat, OWASP ZAP, Burp Suite, Metasploit, AppScan, WebInspect).
• Threat‑modeling methodologies (PASTA, STRIDE) and AWS services.

What we offer

• Competitive base salary with performance‑based bonus programs.
• Comprehensive benefits package and equal‑opportunity workplace.