Application Security Engineer

About the role

Altenar is seeking an experienced Application Security Engineer to join our dynamic team in St Julians, Malta. This role is pivotal in ensuring the security of our applications and systems, protecting sensitive data, and maintaining compliance with industry standards. As part of our commitment to innovation and excellence, you will collaborate with cross-functional teams to identify vulnerabilities, implement security measures, and enhance our overall security posture. If you are passionate about application security and thrive in a fast-paced environment, we encourage you to apply.

Key facts

What you'll do

• Conduct comprehensive security assessments of applications, identifying vulnerabilities and recommending remediation strategies to enhance security.
• Collaborate with development teams throughout the software development lifecycle to integrate security practices into the design and implementation phases.
• Develop and maintain security policies, standards, and guidelines to ensure compliance with industry regulations and best practices.
• Implement and manage security tools and technologies, including static and dynamic analysis tools, to automate security testing and improve efficiency.
• Perform threat modeling and risk assessments to understand potential security risks associated with applications and systems.
• Lead security training sessions for developers and other stakeholders to foster a culture of security awareness and best practices.
• Monitor security incidents and respond to security breaches, conducting post-incident analysis to prevent future occurrences.
• Stay updated on the latest security trends, vulnerabilities, and regulatory changes to ensure that Altenar's security measures remain effective and relevant.
• Collaborate with IT and operations teams to ensure secure deployment and configuration of applications in production environments.
• Participate in security audits and assessments, providing insights and recommendations to improve security posture.
• Document security findings and communicate them effectively to both technical and non-technical stakeholders.
• Contribute to the development of a robust incident response plan to address potential security threats and breaches.

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field.
• A minimum of 3 years of experience in application security, software development, or a related discipline.
• Strong understanding of security principles, practices, and technologies, including OWASP Top Ten, secure coding practices, and vulnerability management.
• Proficiency in programming languages such as Java, C#, Python, or JavaScript, with a focus on secure coding techniques.
• Experience with security testing tools, including SAST, DAST, and penetration testing tools.
• Familiarity with cloud security principles and practices, particularly in AWS or Azure environments.
• Excellent analytical and problem-solving skills, with the ability to think critically about security issues.
• Strong communication skills, both written and verbal, with the ability to convey complex security concepts to diverse audiences.
• Relevant security certifications such as CISSP, CEH, or OWASP are highly desirable.

Nice to have

• Experience with DevSecOps practices and tools, integrating security into CI/CD pipelines.
• Knowledge of regulatory frameworks such as GDPR, PCI-DSS, or ISO 27001.
• Familiarity with container security and orchestration tools like Docker and Kubernetes.
• Experience in threat intelligence and incident response methodologies.
• Understanding of network security principles and practices.

Skills & tools

• Proficient in security assessment tools such as Burp Suite, Nessus, or Fortify.
• Familiar with version control systems like Git and CI/CD tools such as Jenkins or GitLab CI.
• Knowledge of security frameworks and standards, including NIST, ISO 27001, and CIS benchmarks.
• Strong understanding of web application architecture and security best practices.
• Ability to work collaboratively in a team-oriented environment, fostering a culture of security awareness.

Practical notes

• This position is based in St Julians, Malta, and may require occasional travel for training or conferences.
• Altenar offers a competitive salary package and benefits, including opportunities for professional development and growth.
• Candidates must be eligible to work in Malta; visa sponsorship may be available for the right applicant.
• Interested candidates are encouraged to apply through our careers page at [Altenar Careers](https://altenar.bamboohr.com/careers/237).

Join Altenar and be part of a forward-thinking company that values innovation, security, and excellence. We look forward to welcoming a new Application Security Engineer to our team!