Application Security Engineer

About the role

As an Application Security Engineer at Peer Security you will partner with development, engineering and security teams to embed security throughout the software development lifecycle. You will focus on modern development environments, including AI‑assisted coding and cloud‑native applications, helping customers identify, prioritize and remediate risks across code, APIs and infrastructure.

Key responsibilities

• Support and implement Secure Software Development Lifecycle (SSDLC) practices across customer environments.
• Conduct secure code reviews and identify vulnerabilities in applications and APIs.
• Use Wiz to discover, investigate, prioritize and remediate cloud security findings.
• Translate Wiz findings into concrete attack paths, business impact and remediation guidance.
• Collaborate with developers to promote secure coding in traditional and AI‑powered applications.
• Perform penetration testing of web applications and APIs, covering authentication, authorization, business logic, injection, and OWASP Top 10 issues.
• Contribute to threat modeling, architecture reviews and security design discussions for new features.
• Integrate security testing tools (SAST, DAST, SCA) into CI/CD pipelines.
• Advise teams on secure use of large language models, AI APIs and tools such as GitHub Copilot, Cursor and Claude Code.
• Review AI‑generated code for security weaknesses and help automate security controls throughout the development workflow.

Required profile

• Minimum 3 years of hands‑on experience in application security, secure software development or cloud security.
• Proven experience with Wiz (mandatory).
• Strong knowledge of penetration‑testing methodologies and OWASP Top 10 vulnerabilities.
• Ability to assess vulnerability findings beyond automated scanners and evaluate real‑world impact.
• Familiarity with modern software development processes and CI/CD pipelines.

Required skills

• Wiz platform
• Penetration testing techniques
• OWASP Top 10 knowledge
• Secure code review
• Cloud security
• SAST, DAST, SCA tools
• CI/CD pipeline integration
• AI‑assisted development tools (GitHub Copilot, Cursor, Claude Code)
• Large language model (LLM) security
• API security testing