Application Security Engineer

2w2 weeks ago

MicroStrategy

US · Full-time · $145,000 – $205,000

About this role

MicroStrategy (Nasdaq: MSTR) leads in enterprise analytics, AI software, and bitcoin treasury innovation. Join the IT Security group as an Application Security Engineer to safeguard software applications using modern security and AI tooling. Integrate security practices throughout the software development lifecycle for resilient products.

Work closely with development teams on secure SDLC integration, including threat modeling, secure code reviews, and security testing. Identify, triage, and remediate vulnerabilities via static and dynamic application security testing (SAST/DAST) and software composition analysis (SCA). Conduct manual and automated penetration testing on web, mobile, and cloud applications.

Join a team of smart, creative minds tackling dynamic projects with cutting-edge technologies. Thrive in a culture rooted in bold, agile, engaged, impactful, and united values. Foster curiosity, innovation, and relentless pursuit of excellence.

Contribute to AI disruption via enterprise semantic layer and pioneering bitcoin-backed securities. Build a fortress balance sheet in a forward-thinking environment. Have your contributions recognized as part of redefining analytics and financial investment.

Requirements

Experience integrating security into SDLC processes
Proficiency with SAST, DAST, and SCA tools for vulnerability management
Skills in manual and automated penetration testing
Knowledge of web, mobile, and cloud application security
Familiarity with threat modeling and secure code review techniques
Understanding of OWASP Top 10 and common application vulnerabilities
Ability to triage and remediate security issues effectively

Responsibilities

Work closely with development teams to integrate security into the SDLC, including threat modeling, secure code reviews, and security testing
Identify, triage, and remediate security vulnerabilities through SAST/DAST and SCA tools
Conduct manual and automated penetration testing of web, mobile, and cloud applications to detect security flaws
Ensure software products are resilient against vulnerabilities
Collaborate on secure coding practices and security requirements in development
Perform application security assessments and risk analysis
Leverage modern security and AI tooling for vulnerability management