Application Security Engineer

Role overview This remote position focuses on safeguarding mission-critical applications by embedding security practices throughout the software development lifecycle. The role spans web, mobile, cloud, and on-premise environments, combining hands-on technical assessments with advisory work across global engineering teams. It reports into senior information security leadership and supports both proactive defense and incident response.

Responsibilities - Lead security assessments, code reviews, and architecture reviews across web, mobile, cloud, and on-prem applications. - Conduct vulnerability scans, penetration testing, and threat and risk assessments, then define mitigation strategies and track remediation. - Operate and tune application security testing tools (SAST, DAST, IAST) to continuously monitor code and running systems. - Partner with DevOps and engineering teams to integrate security controls into CI/CD pipelines and cloud deployments on AWS, Azure, and GCP. - Maintain documentation covering architecture, incident response procedures, and security standards. - Communicate findings clearly to technical and non-technical stakeholders and deliver security training for developers and internal teams.

Requirements - Bachelor's degree in Computer Science, Information Security, or a related field. - 3+ years of experience in application security covering both cloud and on-premise environments. - Hands-on experience with penetration testing, vulnerability management, and risk assessment practices. - Solid understanding of the OWASP Top 10 and corresponding mitigation strategies. - Proficiency in at least one of Python, Java, or C# for scripting and automation. - Familiarity with major cloud platforms (AWS, Azure, GCP) and modern security testing tools, plus strong cross-cultural communication skills.

Nice to have - Industry certifications such as CISSP, CSSLP, or CEH. - Experience advising global business units and supporting planning of enterprise security initiatives.

Benefits and work setup - Remote work arrangement based in Colombia. - Support for professional development and an inclusive, community-minded culture. - Global, distributed team environment with collaboration across regions and time zones. - Paid time off, wellness and healthcare benefits, performance bonus opportunities, and tuition reimbursement.