Senior Application Security Engineer

Fortinet
London, Reading, United Kingdom, Germany
Workplace: HybridFull timeFunction: CybersecurityExperience: 5+ yearsEducation: bachelorsSkills: ["Communication","Teamwork","Mentoring","Problem-solving"]

Senior Application Security Engineer to join Fortinet’s Corporate Information Security team. The role is highly technical, focusing on security reviews of Fortinet applications, guidance to engineers, vulnerability handling, and driving the secure SDLC across a distributed global team.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Fortinet
Fortinet
2 months ago

Senior Application Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 17 hours agoStatus: Live

Job Summary

Senior Application Security Engineer to join Fortinet’s Corporate Information Security team. The role is highly technical, focusing on security reviews of Fortinet applications, guidance to engineers, vulnerability handling, and driving the secure SDLC across a distributed global team.
Location: London, Reading, United Kingdom, Germany
Workplace: Hybrid
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Sr. Manager level

Key Responsibilities

  • •Serve as an application security expert providing guidance to internal teams
  • •Work with development teams performing code reviews, penetration tests, and architectural reviews on existing code and new features
  • •Develop and communicate vulnerability mitigation strategies to development teams
  • •Handle externally reported vulnerabilities as part of the Responsible Disclosure Program
  • •Drive Fortinet’s static and dynamic application security testing program

Key Requirements

  • •5+ years of work experience as an Information Security Researcher or Engineer
  • •3+ years of experience auditing source code or programming in Java, .NET, Python or JavaScript frameworks
  • •Strong understanding of OWASP Top 10 vulnerabilities and API security risks
  • •Experience in cloud-native architecture, microservices, containerization, and secure deployment
  • •Experience with application penetration testing, secure code review, and SAST/DAST/IAST/SAAS tools
Experience:5+ yearsInformation securityCybersecurity
Education:Bachelor's in Computer ScienceNot specified
Skills:CommunicationTeamworkMentoringProblem-solving
Certifications:OSWEOSCPGPENGWEB
Tech Stack:Java.NETPythonJavaScriptOWASPBurpOWASP ZAPFiddlerOAuthJWTCSPSOPCORSCI/CD

Company Brief

Fortinet
Provides enterprise cybersecurity solutions including data protection, cloud security, network security, and user and entity behavior analytics to help organizations prevent insider threats, secure cloud and on-premises environments, and enforce data loss prevention policies.
Industry: Cybersecurity
Company Size: Enterprise (1,001+ employees)
Growth: Established Company
Funding: Private Equity Backed
Headquarters: Austin, United States
Founded: 1994
WebsiteLinkedIn