Application Security Engineer

Role overview Help engineering teams build secure software throughout the development lifecycle. The work spans secure design, threat modeling, code and architecture reviews, and practical remediation, with the aim of addressing risk as part of normal engineering rather than only during a final audit.

Responsibilities - Integrate security practices into application design and development workflows. - Conduct application security reviews and threat modeling. - Review authentication, authorization, and data-handling designs for risk. - Help developers remediate vulnerabilities and improve secure coding guidance and checklists. - Support controls for dependencies, secrets, and continuous integration pipelines. - Assess third-party and integration risks, collaborate with penetration testers, and help teams prepare for application security incidents.

Requirements - Strong understanding of web and API security. - Experience with secure development practices and common vulnerability types. - Familiarity with OWASP guidance. - Ability to review code and architecture and explain practical remediation to developers. - Understanding of security tooling in CI/CD workflows. - Ability to prioritize findings by risk and communicate clearly with engineering teams.

Nice to have Experience with static or dynamic application security testing, dependency scanning, cloud security fundamentals, identity systems, or secure software development lifecycle programs.

Benefits and work setup Part-time, fully remote work from Egypt, with flexible hours and collaboration overlap. Cairo office access is available when needed. Listed support includes paid annual and sick leave, performance bonuses, annual salary reviews, learning and certification support, conference opportunities, equipment and internet support, medical insurance, mentorship, and work across projects in different industries.