Required Skills;
Web application security and vulnerabilities, penetration testing tools (Burp Suite, Veracode, etc.)and techniques
Vulnerability scanning tools like Whitehat, Checkmarx, Fortify
Network security principles and technologies
Key responsibilities of an Application Security Engineer include (Not limited to):
Conducting application security assessments: You will be responsible for conducting security assessments of web and mobile applications to identify vulnerabilities and security risks. This will involve using automated and manual testing techniques to identify vulnerabilities and security weaknesses in applications.
Developing security policies and procedures: You will work with other security professionals to develop security policies and procedures that are appropriate for the organization's needs. This includes developing guidelines for secure coding practices, performing threat modeling exercises, and creating incident response plans.
Reviewing application designs: You will work with development teams to review application designs and provide feedback on security best practices. This will include evaluating application architectures, reviewing security requirements, and identifying potential security risks.
Implementing security controls: You will work with development teams to implement security controls within applications, including authentication and authorization mechanisms, data encryption, and access controls.
Conducting penetration testing: You will conduct penetration testing on applications and systems to identify vulnerabilities and security weaknesses. This may involve using tools and techniques such as SQL injection, cross-site scripting (XSS), and other common attack vectors.
Providing security guidance: You will provide guidance to development teams on security best practices, including secure coding practices, vulnerability scanning, and penetration testing.
Maintaining security tools and systems: You will be responsible for maintaining security tools and systems, including vulnerability scanners and other security software.