Senior Application Security Engineer
- Hiring Organisation
- TripleLift
- Location
- London, UK
- Employment Type
- Full-time
pipeline integrations themselves. Administer and drive adoption of GitHub Advanced Security (GHAS) : code scanning, secret scanning, and dependency review across engineering repositories. Participate in threat modeling and design/architecture spec reviews to identify and mitigate security risks early in the SDLC.Coordinate with stakeholders to develop and implement … vulnerability management program and to perform threat-hunting activities. Own and conduct internal penetration testing and vulnerability assessments of applications and infrastructure, and validate findings from third-party pentest engagements. Monitor and respond to application-layer security threats like API abuses, business logic flaws, and common web vulnerabilities. Collaborate ...