{"id":2453162,"url":"https://alion.io/job/siren-associates-application-security-engineer","title":"Application Security Engineer","company":{"id":4420414,"name":"Siren Associates","domain":"sirenassociates.com","url":"https://alion.io/company/sirenassociates","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Zoho Recruit","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Beirut, Lebanon"],"countries":["LB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":39000,"max_usd":95000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":629},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Burp Suite","optional":false},{"name":"CI/CD","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"Rest API","optional":false},{"name":"SQL","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-10-13T15:22:48Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-13T23:21:09Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Our Opportunity\nThe\nApplication Security Engineer will assess and strengthen the security of\napplications developed and maintained by our team. The role will conduct\npenetration tests and vulnerability assessments, provide practical remediation\nguidance, and verify fixes in close collaboration with Development, QA, and\nDevOps teams.\nYou Will\nPlan andconduct manual and automated penetration testing of web applications, APIs, and\nmobile applications where applicable.\n\nEvaluateauthentication, authorization, session management, input validation, business\nlogic, and sensitive data protection.\n\nInvestigatevulnerability scanner results, eliminate false positives, and document clear,\nreproducible evidence.\n\nPrioritizefindings based on severity, exploitability, and business impact, and promptly\nescalate critical vulnerabilities.\n\nWorkwith developers to address root causes, recommend practical fixes, and retest\nvulnerabilities before closure.\n\nConducttargeted security code reviews, contribute to secure design reviews, and\nsupport security checks within development pipelines.\n\nMaintaina vulnerability register and prepare detailed technical reports and concise\nmanagement updates.\n\nGuidedevelopers on secure coding practices and help prevent recurring\nvulnerabilities.\n\nExpected Deliverables\nAssessment plans outlining scope, approach, and schedule.\nSecurity reports with prioritized findings, evidence, reproduction steps, and remediation recommendations.\nVulnerability register tracking ownership, deadlines, and resolution status.\nRetesting results confirming fixes and documenting outstanding risks.\nPeriodic management summaries and practical secure coding guidance.\nRequirements\nTo Be Successful You Need\nBachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent practical experience. \n3+ years of hands-on experience in application security or penetration testing, including web applications and APIs.\nStrong understanding of common application vulnerabilities and OWASP testing practices.\nDemonstrated ability to perform manual security testing beyond automated vulnerability scanning.\nPractical experience with tools such as Burp Suite, OWASP ZAP, API testing tools, and vulnerability scanners.\nGood understanding of HTTP/HTTPS, REST APIs, authentication, access controls, SQL, and application configurations.\nAbility to review code in at least one relevant programming language and write basic testing or automation scripts.\nExperience guiding developers through remediation and verifying implemented fixes.\nAbility to manage assessments independently and communicate findings clearly to technical and nontechnical stakeholders.\nRelevant practical certifications, such as OSCP, OSWE, or equivalent.\nExperience with mobile security testing, threat modeling, and secure design reviews.\nFamiliarity with CI/CD security tools, dependency scanning, and secret detection.\nExperience working in on-premises or restricted environments and handling sensitive information.\nCertifications are an advantage; demonstrated practical competence remains the primary selection criterion.\nSiren is an equal opportunity employer. At Siren we value ethics, dedication, sustainability, safeguarding, respect, and inclusion.\nAre you interested to work with our dedicated team on impactful projects? We welcome applications from all qualified candidates, regardless of background. Do apply!","description_format":"text","description_chars":3437,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security"],"lifecycle":[{"event":"open","at":"2026-10-13T15:22:48Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":19,"reasons":["conf:3","win:early"],"computed_at":"2026-10-14T03:09:06Z"},"pay":null,"html_url":"https://alion.io/job/siren-associates-application-security-engineer","json_url":"https://alion.io/job/siren-associates-application-security-engineer.json","meta":{"generated_at":"2026-10-14T03:09:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4908,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4420414},"rest":"https://alion.io/mcp/rest/get_company?id=4420414"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsiren-associates-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsiren-associates-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsiren-associates-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/siren-associates-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsiren-associates-application-security-engineer"}]}