Application Security Engineer

About the role

AppsFlyer’s Security team is seeking an Application Security Engineer to lead product and application security initiatives. You will work closely with R&D and Product teams to embed security throughout the software development lifecycle.

Key responsibilities

• Partner with development and product teams to integrate security best practices into the SDLC.
• Lead threat modeling, architecture reviews, code reviews, vulnerability scans, and penetration testing.
• Automate security processes and integrate tools into CI/CD pipelines.
• Support incident response, root‑cause analysis, and post‑incident improvements.

Required profile

• 3+ years of experience in Application Security, Penetration Testing, or Product Security within a SaaS environment.
• Strong communication skills to convey security risks and recommendations to technical and non‑technical stakeholders.

Required skills

• Hands‑on web application security knowledge (OWASP Top 10, authentication, encryption, secure coding).
• Proficiency in scripting/programming languages such as Terraform, Python, JavaScript, Go.
• Experience with cloud security on AWS, GCP or Azure.
• Familiarity with DevSecOps and CI/CD security tooling.