Senior Security Engineer, Application Security (APAC)

Who you are

You have a strong background in application security, with at least 5 years of experience in security engineering or a related field. You understand the importance of integrating security into the software development lifecycle and have a proven track record of conducting security assessments and reviews. Your expertise in OWASP principles and practices allows you to identify vulnerabilities and recommend effective remediation strategies. You are familiar with various security tools and technologies, and you can effectively communicate security concepts to both technical and non-technical stakeholders.

You thrive in collaborative environments and enjoy working closely with engineering teams to foster a culture of security awareness. You are proactive in identifying potential security risks and have experience implementing security best practices in software development. Your analytical mindset enables you to assess complex systems and identify areas for improvement. You are committed to continuous learning and staying updated on the latest security trends and threats.

Desirable

Experience with cloud security and DevSecOps practices is a plus. Familiarity with security frameworks and compliance standards such as ISO 27001 or NIST is also beneficial. You may have experience with security automation tools and techniques, which can enhance your contributions to the team.

What you'll do

In this role, you will conduct security-focused application design and architecture reviews, collaborating with product teams to ensure that security is integrated into the development process from the outset. You will analyze application designs and provide actionable feedback to mitigate security risks. Your responsibilities will include performing threat modeling and vulnerability assessments, as well as developing security guidelines and best practices for the engineering teams.

You will work closely with developers to educate them on secure coding practices and assist in the implementation of security controls. Your role will involve monitoring and responding to security incidents, as well as conducting post-incident reviews to identify lessons learned and improve security posture. You will also contribute to the development of security training materials and participate in security awareness initiatives across the organization.

What we offer

GitLab offers a flexible remote work environment, allowing you to work from anywhere in the APAC region. You will be part of a high-performance culture that values collaboration, innovation, and continuous improvement. We provide opportunities for professional development and encourage you to pursue certifications and training that enhance your skills. Join us in our mission to build a secure and reliable software development platform that empowers organizations worldwide.