Sr. Application Security Engineer
Gen Digital3 months ago
Prague, CzechiaSenior
Responsibilities
- Partner with engineering, platform, and product teams to integrate security into development workflows and release processes.
- Perform application security reviews, threat modeling, and security assessments for features, services, and architectural changes.
- Provide secure coding guidance, vulnerability remediation support, and application hardening recommendations.
- Evaluate, implement, and optimize SAST, DAST, SCA, and vulnerability management tooling.
- Integrate security controls and testing into CI/CD pipelines and engineering workflows.
- Support vulnerability triage, prioritization, remediation, incident investigations, and root cause analysis.
- Develop security standards, documentation, playbooks, and developer guidance.
- Define and track security metrics to improve visibility, coverage, and risk reduction.
- Evaluate emerging security technologies and promote secure AI-assisted development practices.
Requirements
- Experience in Application Security, Product Security, Secure Software Development, or a related field.
- Strong understanding of application vulnerabilities, secure coding principles, and the OWASP Top 10.
- Experience with application security testing technologies, including SAST, DAST, SCA, and vulnerability management platforms.
- Ability to understand source code, infrastructure definitions, configuration files, and CI/CD pipelines.
- Experience integrating security controls into development and delivery pipelines.
- Ability to assess security risks pragmatically and communicate with technical and non-technical stakeholders.
- Experience collaborating across engineering, product, and security teams and evaluating security tools, technologies, and vendor solutions.
- Familiarity with AI-assisted engineering workflows and secure adoption of AI technologies.
- Strong written and verbal English communication skills.
- Experience in API Security, mobile application security for iOS or Android, secrets management, cloud-native platforms, security enablement, or scaling application security programs is a plus.
Benefits
- Flexible working options, time off, competitive pay, benefits, and well-being programs.
- Opportunity to work with global cybersecurity brands and support products used by nearly 500 million users in more than 150 countries.
Tech Stack
iOS
Categories
About Gen Digital
Gen (NASDAQ: GEN) is a global company dedicated to Powering Digital Freedom through its trusted Cyber Safety brands, Norton, Avast, LifeLock, MoneyLion and more. The Gen family of consumer brands is rooted in providing empowerment and safety for the first digital generations. Now, Gen empowers people to live their digital lives confidently today and for generations to come. Gen brings award-winning products and services in cybersecurity, online privacy, identity protection and financial wellness to millions of users in more than 150 countries. Norton.com Avast.com LifeLock.com MoneyLion.com Avira.com AVG.com CCleaner.com GOBankingRates.com ReputationDefender.com