Senior Application Security Engineer at Software Business Solutions Consulting

Role Description

• The Senior Application Security Engineer is a contract, on-site role based in Ikeja, responsible for securing applications and related infrastructure throughout the software development lifecycle.
• This role involves performing threat modeling, secure design reviews, and code reviews to identify and remediate vulnerabilities in web, mobile, and backend systems.
• The engineer will collaborate closely with development, DevOps, and product teams to integrate security best practices, define secure coding standards, and support automated security testing in CI/CD pipelines.
• Daily activities include analyzing security incidents, conducting penetration testing and risk assessments, recommending technical and process improvements, and documenting security requirements and guidelines.
• The role also includes mentoring team members on security practices, staying current on emerging threats and technologies, and contributing to the overall security posture of client solutions.

Qualifications

• Strong expertise in application security, including threat modeling, secure architecture design, code review, and vulnerability assessment.
• Experience with common security tools and technologies (e.g., SAST/DAST tools, dependency scanning, penetration testing frameworks, and security monitoring solutions).
• Solid understanding of secure software development practices, including SDLC integration, CI/CD pipeline security, and DevSecOps principles.
• Knowledge of industry security standards and frameworks such as OWASP Top 10, NIST, ISO 27001, and relevant compliance requirements.
• Proficiency in at least one major programming language (such as Java, C#, JavaScript, Python, or similar) and familiarity with modern web and mobile application frameworks.
• Experience collaborating with cross-functional teams, providing security guidance to developers, and communicating technical risks to non-technical stakeholders.
• Strong analytical and problem-solving skills, with the ability to prioritize risks and recommend practical mitigation strategies.
• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field; relevant certifications (e.g., CISSP, CSSLP, OSCP, CEH) are an advantage.
• Prior experience in a senior or lead application security role, preferably within consulting or multi-industry environments.