Application Security Engineer

About the role

SOFTSWISS is looking for an Application Security Engineer to ensure that our software is released securely and efficiently. You will work closely with product teams throughout the software development lifecycle to identify, assess, and remediate security vulnerabilities.

Key responsibilities

• Partner with product teams during design to conduct threat modeling and risk assessments.
• Perform manual code reviews on critical applications to uncover logical vulnerabilities.
• Fine‑tune automated security scanning rulesets to reduce false positives.
• Develop scripts and automation tools to streamline security workflows.
• Assist developers in understanding and fixing security findings from assessments and dynamic testing.
• Triage and resolve vulnerabilities reported through the bug bounty program.
• Provide security consulting, knowledge sharing, and actionable guidance to Dev/QA teams.
• Maintain an internal security knowledge base with secure coding guidelines.

Required profile

• 3+ years of experience in application security, software development, or related technical roles.
• Strong understanding of web fundamentals (HTTP/HTTPS, cookies, session management).
• Knowledge of web security mechanisms such as SOP, CORS, and CSP.
• Deep familiarity with OWASP Top 10 vulnerabilities and mitigation strategies.
• Experience with secure‑by‑design architecture and manual security assessments.
• Ability to clearly communicate business impact of security issues.
• University degree in Computer Science, Information Security, or equivalent practical experience.

Required skills

• HTTP/HTTPS protocols
• Cookie storage and session management
• SOP, CORS, CSP
• OWASP Top 10
• Manual security assessment
• Secure code review
• Automated security scanning tools
• Scripting/automation for security workflows