About the Role
At Mootiva, we are recruiting a Security Engineer to join a project focused on application security, from design through operations. We are looking for a professional with experience in software development and application architecture who has moved into the field of application security. You will work directly with development, architecture and operations teams, supporting the identification and remediation of vulnerabilities and promoting secure development practices.
Responsibilities
•Promote Secure SDLC practices and integrate security requirements into the development lifecycle
•Participate in architecture reviews and threat modelling sessions
•Analyze and prioritize vulnerabilities identified in pentests and by SAST, DAST, dependency analysis and container tools
•Provide technical support to teams in remediating vulnerabilities and monitor remediation plans
•Coordinate pentests with external providers, validate results and monitor recommendations
•Integrate and automate security controls in CI/CD pipelines
•Run Secure Coding workshops, produce technical guidelines and support Security Champions initiatives
•Define and monitor application security metrics
Requirements
•Previous experience in software development and application architecture, with a move into Application Security roles
•Solid experience in Java (Spring Boot, REST APIs and Maven) and/or C# (.NET Framework/.NET Core and ASP.NET)
•Knowledge of Linux, Shell Scripting and basic hardening
•Knowledge of cloud and experience with real application deployments — mandatory requirement
•Practical knowledge of OWASP Top 10, OWASP ASVS, Secure Coding and Threat Modelling
•Knowledge of API security, authentication and authorization, including OAuth2, OpenID Connect and JWT
•Knowledge of applied cryptography, certificate management and secrets management
•Experience with some security tools, such as SonarQube, Checkmarx, Fortify, Veracode, Snyk, Dependabot, OWASP ZAP, Burp Suite or Trivy
•Ability to analyze code and directly support vulnerability resolution
•Good communication and analytical skills, and the ability to train, guide and mobilize teams to adopt security best practices
Nice to Have
•Experience with AWS and/or Azure; experience with other cloud platforms is also relevant
•Knowledge of Angular, JavaScript and TypeScript
Conditions
No conditions specified in the posting.
