Application Security Engineer

Required Skill and Experience • Threat Modeling such as: (STRIDE, PASTA, Attack trees, tooling, Att&ck) is an added advantage. • Identifying vulnerabilities using CWE or OWASP. • Security practices pertaining to: authentication, authorization, logging/monitoring, encryption, infrastructure security, network/segmentation is required. • Operating systems and their hardening. • Development concepts (such as: CICD, Pipelines, SDLC). • Scripting languages, Infrastructure as Code (Terraform, CloudFor…