{"id":3093261,"url":"https://alion.io/job/content-management-solutions-senior-application-security-engineer","title":"Senior Application Security Engineer","company":{"id":4446422,"name":"Content Management Solutions","domain":"cms.lk","url":"https://alion.io/company/content-management-solutions","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"CATS","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Colombo, Sri Lanka"],"countries":["LK"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":14000,"max_usd":33000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Docker","optional":false},{"name":"GCP","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab","optional":false},{"name":"JavaScript","optional":false},{"name":"Jenkins","optional":false},{"name":"Kubernetes","optional":false},{"name":"OWASP Top 10","optional":false}],"status":"live","first_seen_at":"2026-10-21T18:30:00Z","employer_posted_date":null,"last_verified_at":"2026-10-21T18:30:00Z","board_verified":false,"closed_at":null,"days_open":11,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":11},"description":"Content Management & Solutions\n\nAnniversary\n\nSENIOR APPLICATION\nSECURITY ENGINEER\n\nJOIN NOW\n\nOur US-based client is seeking a Senior Application Security Engineer to join its remote operations team in Sri Lanka.\n\nYOUR RESPONSIBILITIES\n\nIntegrate and automate security tools (SAST, DAST, SCA, & secret scanning) into Cl/CD pipelines.\n\nManage bug bounty programs, including vulnerability triage, validation, & remediation.\n\nConduct application security threat hunting to identify exploits, API vulnerabilities, and suspicious activity.\n\nPerform application penetration testing, code reviews, threat modelling, & security architecture reviews.\n\nCollaborate with develooment teams to improve secure coding practices\n& application security.\n\nYOUR QUALIFICATIONS\n\n>» 5+ years of experience in Information Security, with strong expertise in\n\n>» Hands-on experience managing bug bounty programs using platforms such as HackerOne or Bugcrowd.\n\nProven experience integrating security testing tools into Cl/CD pipelines (GitHub Actions, GitLab Cl, or Jenkins).\n\n>» Strong knowledge of OWASP Top 10, API security, threat modelling, & application vulnerabilities.\n\n>» Experience with application security threat hunting & penetration testing.\n\nPractical knowledge of cloud security (AWS, Azure, or GCP) & container security (Docker/Kubernetes).\n\n» Proficiency in at least one programming or scripting language, such as\nPython, Go, Java, or JavaScript.\n\n>» Familiarity with Al concepts, modern Al-powered development tools, & cloud-based coding environments is highly desirable.\n\n>» Strong proactive communicator with excellent English communication skills (both written & verbal), with the ability to collaborate directly with\nUS-based teams.\n\nAPPLY > © Visit www.cms.Ik or email your resume\n\nto |k with the subject\n“Senior Application Security Engineer’.\n\nEmployment: Full Time, Permanent, Onsite\nClosing date: 29 Oct 2026\nJob ref: 1562903","description_format":"text","description_chars":1927,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Information Technology","IT Outsourcing & Dedicated Teams","Digital Media"],"lifecycle":[{"event":"open","at":"2026-10-22T15:27:50Z"}],"visa":[],"liveness":{"score":76,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.843,"p_room":0.9,"age_days":10,"expected_fill_days":28,"reasons":["seen:10","win:mid"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/content-management-solutions-senior-application-security-engineer","json_url":"https://alion.io/job/content-management-solutions-senior-application-security-engineer.json","meta":{"generated_at":"2026-11-01T18:41:12Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":28563,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4446422},"rest":"https://alion.io/mcp/rest/get_company?id=4446422"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcontent-management-solutions-senior-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcontent-management-solutions-senior-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcontent-management-solutions-senior-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/content-management-solutions-senior-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcontent-management-solutions-senior-application-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3093261}},{"tool":"search_jobs","arguments":{"company":"cms.lk","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3093261},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}