Tatal
we are committed to revolutionizing the way businesses operate by providing cutting-edge technology solutions.
شرح موقعیت
Application Security Engineer (AppSec) Tatal is looking for an Application Security Engineer to make sure our applications are secure before they reach production. You'll work closely with our engineering teams to build security into every stage of the development lifecycle. Key Responsibilities
مسئولیتها
- Conduct security reviews of applications before production deployment
- Perform SAST, DAST, dependency, and vulnerability scanning
- Assess authentication, authorization, RBAC, and API security
- Identify vulnerabilities based on the OWASP Top 10 and OWASP API Security Top 10
- Review secrets management, encryption, and sensitive data handling
- Perform security-focused code reviews, prioritizing critical components
- Conduct or coordinate penetration testing ahead of major releases
- Define security gates and checklists for production releases
نیازمندیها
- Proven experience securing modern SaaS and web applications
- Hands-on experience with SAST/DAST and dependency scanning tools
- Strong understanding of authentication and authorization (OAuth 2.0, OIDC, JWT)
- Solid knowledge of OWASP Top 10 and API security best practices
- Ability to work with development teams and explain risks clearly
- Experience integrating security into CI/CD pipelines
- Security certifications (e.g., OSCP, OSWE, GWAPT)