About Horizontal Talent

Established in 2003 in the US, Horizontal solves complex challenges across two distinct businesses: Horizontal Digital and Horizontal Talent. We are consistently recognized for being a top workplace and one of the fastest-growing private companies. Horizontal Talent specializes in staffing for IT, Digital & Creative, and Business & Strategy markets. We have global offices in the US, UAE, India, Malaysia, and Australia.

Job Overview

We are looking for an experienced Application Security Engineer to embed security into application development and deployment processes while enabling secure software delivery. The role focuses on integrating security controls, identifying application vulnerabilities, and strengthening security practices throughout the Software Development Life Cycle (SDLC).

Key Responsibilities

• Integrate security requirements, controls, and testing activities into the Software Development Life Cycle (SDLC) and DevSecOps pipelines.

• Manage and support application security tools, including SAST, DAST, SCA, secret scanning, and container security scanning solutions.

• Perform application security assessments, including web applications and APIs.

• Review application architecture and design to identify security risks and recommend secure design practices.

• Establish and maintain secure coding standards, guidelines, and developer security awareness programs.

• Support secure application deployment activities and validate security controls before production release.

• Perform vulnerability triage, false-positive validation, and remediation tracking for application security findings.

• Monitor emerging application security threats and recommend improvements to strengthen the organization's application security posture.

• Work closely with developers, DevOps engineers, cloud teams, and project teams throughout the SDLC.

Job Requirements

• 3–10 years of working experience in Application Security, DevSecOps, or a related cybersecurity field.

• Strong understanding of application security principles, OWASP, and secure coding practices.

• Hands-on experience with application security testing tools and technologies, including SAST, DAST, SCA, Burp Suite, and related solutions.

• Experience in web application and API security assessments.

• Familiarity with SDLC, DevSecOps pipelines, and application vulnerability management.

• Knowledge of secret scanning, container security scanning, and secure application deployment.

• Strong analytical, problem-solving, and communication skills.

• Ability to collaborate effectively with development, DevOps, cloud, and project teams.