Application Security Engineer

Job not on LinkedIn

🔥 1 minute ago

🇯🇴 Jordan – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

💻 Application Engineer

👻 Ghost score 11%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Aspire, Jordan

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2002

💼 Consulting

🏥 Healthcare

📣 Marketing

Consulting • Healthcare • Marketing

Aspire is reimagining and redefining what being a technology partner in the region means. With a commitment to exceeding expectations and providing exceptional quality work, Aspire consists of a group of technology experts with diverse backgrounds and expertise. The company offers a wide range of digital consulting and technology services, including digital strategy, automation, and cybersecurity solutions, while also focusing on social responsibility initiatives. Aspire serves various sectors such as financial services, healthcare, media, e-commerce, and retail, positioning itself as a trusted digital partner across the MENA region and the US.

📋 Description

• Identify, validate, and remediate application and API vulnerabilities across digital platforms • Triage security findings from Wiz, Qualys, and automated or AI-driven penetration testing tools • Reproduce exploits, identify false positives, and assess exploitability, business impact, data exposure, and overall risk • Track vulnerability remediation through closure and review developer fixes • Provide code-level remediation guidance and recommend root-cause solutions • Perform manual security testing of web applications and REST and GraphQL APIs • Test authentication, authorization, BOLA/IDOR, privilege escalation, session management, injection, business logic, and OWASP API Security Top 10 vulnerabilities • Investigate shadow and undocumented APIs and assess their exposure and risks • Conduct secure code reviews and threat modeling for application features, APIs, and integrations • Manage and optimize SAST and DAST programs using Snyk, SonarQube, and Qualys WAS • Configure and maintain authenticated DAST scans and reduce false positives • Correlate Snyk, SonarQube, Qualys, and Wiz findings across source code and production environments • Integrate security testing into development workflows and CI/CD pipelines • Assess AWS IAM, S3, API Gateway, Lambda, secrets management, and other configurations affecting application security • Validate cloud-to-application attack paths identified by Wiz • Review AWS WAF rules and recommend protective measures • Use AWS Security Hub, GuardDuty, and Inspector findings for investigations and risk prioritization • Track vulnerability trends, remediation SLAs, and application security posture • Report findings and recommendations to engineering and security leadership • Collaborate with development, cloud, and security teams to improve application security and vulnerability management

🎯 Requirements

• Bachelor’s degree in Information Security, Computer Science, Software Engineering, or a related field, or equivalent practical experience • 5+ years of hands-on experience in application security, penetration testing, or vulnerability research • Experience identifying and exploiting business logic flaws and access control vulnerabilities in REST and GraphQL APIs • Deep understanding of the OWASP Top 10 and OWASP API Security Top 10 • Proficiency with Burp Suite Professional, including request manipulation and custom test case development • Experience operating, configuring, and tuning SAST and DAST tools such as Snyk, SonarQube, and Qualys • Ability to read, analyze, and review application code in Python, Java, Go, or JavaScript/TypeScript • Working knowledge of AWS IAM, S3, Lambda, and API Gateway security configurations • Experience with Wiz, Qualys, or comparable CNAPP and vulnerability management platforms • Experience integrating security testing into development workflows and collaborating with developers on secure coding practices • Understanding of vulnerability assessment, exploit validation, risk-based prioritization, and remediation lifecycle management • Experience with SOAR platforms, including building playbooks and integrations • Experience with automated or AI-assisted penetration testing and continuous DAST platforms • Experience developing custom security rules and quality profiles in SonarQube or Snyk • AWS Certified Security – Specialty certification • Offensive security certifications such as OSCP, OSWE, BSCP, or GWAPT • Participation in bug bounty programs or experience publishing vulnerability research • Strong written and verbal communication skills for developer-focused remediation guidance and security reports • Ability to influence development teams, drive remediation without direct authority, and work independently in a fast-paced remote environment • Awareness or knowledge of IT security best practices defined by ISO/SOC or similar

🏖️ Benefits

• Competitive long-term total compensation package with salary and performance-based bonus • Remote-first organization with flexibility • Technical and non-technical training programs • Global exposure through products with international teams and clients • Virtual and in-person international technology conferences • Exposure to an IT environment adhering to rigorous ISO/SOC security and compliance standards