Senior Application Security Engineer
First seen by Alion on Oct 21, 2026.
Content Management & Solutions
Anniversary
SENIOR APPLICATION
SECURITY ENGINEER
JOIN NOW
Our US-based client is seeking a Senior Application Security Engineer to join its remote operations team in Sri Lanka.
YOUR RESPONSIBILITIES
Integrate and automate security tools (SAST, DAST, SCA, & secret scanning) into Cl/CD pipelines.
Manage bug bounty programs, including vulnerability triage, validation, & remediation.
Conduct application security threat hunting to identify exploits, API vulnerabilities, and suspicious activity.
Perform application penetration testing, code reviews, threat modelling, & security architecture reviews.
Collaborate with develooment teams to improve secure coding practices
& application security.
YOUR QUALIFICATIONS
>» 5+ years of experience in Information Security, with strong expertise in
>» Hands-on experience managing bug bounty programs using platforms such as HackerOne or Bugcrowd.
Proven experience integrating security testing tools into Cl/CD pipelines (GitHub Actions, GitLab Cl, or Jenkins).
>» Strong knowledge of OWASP Top 10, API security, threat modelling, & application vulnerabilities.
>» Experience with application security threat hunting & penetration testing.
Practical knowledge of cloud security (AWS, Azure, or GCP) & container security (Docker/Kubernetes).
» Proficiency in at least one programming or scripting language, such as
Python, Go, Java, or JavaScript.
>» Familiarity with Al concepts, modern Al-powered development tools, & cloud-based coding environments is highly desirable.
>» Strong proactive communicator with excellent English communication skills (both written & verbal), with the ability to collaborate directly with
US-based teams.
APPLY > © Visit www.cms.Ik or email your resume
to |k with the subject
“Senior Application Security Engineer’.
- Employment: Full Time, Permanent, Onsite
- Closing date: 29 Oct 2026
- Job ref: 1562903