Application Security – Vulnerability Discovery Engineer

About the role

We are seeking an Application Security – Vulnerability Discovery Engineer to strengthen the security of modern software applications. The role will focus on identifying, analysing, and reducing vulnerabilities across the organisation’s application portfolio, working closely with engineering and product teams throughout the software development lifecycle.

Key responsibilities

• Tri‑age, validate, prioritize and manage security vulnerabilities discovered via manual reviews, automated tools, bug bounty programs and AI‑assisted platforms.
• Partner with software engineering and product teams to drive remediation, provide actionable guidance and ensure timely resolution based on risk and severity.
• Review security‑related pull requests, source‑code changes and development workflows to detect weaknesses and recommend secure implementation approaches.
• Analyse findings from AI‑powered security tools, reduce false positives and improve detection workflows.
• Participate in incident‑response investigations, root‑cause analysis and post‑mortem activities for application‑security issues.
• Develop and maintain security tooling, automation scripts and vulnerability‑scanning platforms, including policy configuration, scheduling and reporting.
• Track remediation progress, security metrics and risk‑reduction initiatives, providing visibility to stakeholders.
• Create documentation, best‑practice guides and educational resources to promote secure coding across teams.
• Take part in an on‑call rotation to support security triage and code‑review requests.

Required profile

• Proven experience in application security and vulnerability management.
• Strong technical mindset with the ability to work collaboratively with development teams.
• Proactive attitude toward improving security processes at scale.

Required skills

• Vulnerability management
• Secure coding practices
• Security automation
• AI‑assisted security tools
• Vulnerability scanning platform configuration