$ Full time on site

Application Security Engineering Service

VaporVM
Dubai, DU, AE

Job Description

Date Posted: 22 July, 2026

Industry: IT Services and IT Consulting

Location: VAPORVM IT SERVICES DMCC

Job Description:

Based on the responsibilities and qualifications provided, here’s a comprehensive and professional Job Description (JD) for an Application Security On-Site Engineer role.

Job Summary

The Application Security On-Site Engineer is responsible for ensuring the security of enterprise applications throughout their lifecycle by performing security assessments, managing application security tools, identifying vulnerabilities, and supporting remediation efforts. The role serves as a key liaison between security, development, and IT operations teams to enhance the organization’s security posture and ensure compliance with security standards and regulatory requirements.

The successful candidate will possess strong technical expertise in application security, vulnerability management, secure software development practices, and security testing methodologies. This position requires hands-on operational support and active collaboration with stakeholders to drive security improvements across both internally developed and third-party applications.

Key Responsibilities

Application Security Operations

Administer, configure, maintain, and optimize application security tools and platforms, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and vulnerability management solutions.
Monitor application security controls and ensure continuous operational effectiveness.
Support the deployment, integration, and ongoing management of security solutions within development and production environments.
Troubleshoot and resolve technical issues related to application security tools and services.

Security Assessments and Testing

Conduct comprehensive application security assessments for internally developed, commercial off-the-shelf (COTS), cloud-based, and third-party applications.
Perform vulnerability assessments, secure code reviews, configuration reviews, and security testing activities.
Identify security weaknesses, vulnerabilities, and misconfigurations within applications and supporting infrastructure.
Validate security findings and eliminate false positives through detailed analysis.

Vulnerability Management

Analyze, classify, and prioritize vulnerabilities based on risk, exploitability, business impact, and compliance requirements.
Maintain vulnerability tracking processes and ensure accurate documentation of findings.
Monitor remediation progress and verify the effectiveness of corrective actions.
Support risk management activities by providing recommendations for mitigation strategies.

Secure Development Support

Partner with software development teams to promote Secure Software Development Lifecycle (SSDLC) practices.
Provide secure coding guidance and application security best practice recommendations.
Review application architecture and design to identify potential security risks.
Assist developers in understanding and addressing security vulnerabilities during development and testing phases.

Collaboration and Incident Support

Work closely with development, infrastructure, DevOps, cloud, and IT operations teams to resolve security issues.
Participate in security investigations involving application-related vulnerabilities and incidents.
Support root cause analysis and implementation of preventive security controls.
Serve as the on-site technical focal point for application security-related activities.

Documentation and Reporting

Prepare detailed security assessment reports, risk reports, vulnerability summaries, and remediation recommendations.
Develop and maintain security procedures, standards, and operational documentation.
Produce metrics and dashboards related to application security posture and vulnerability trends.
Ensure documentation aligns with organizational policies, regulatory requirements, and industry standards.

Compliance and Governance

Support compliance initiatives related to ISO 27001, NIST, PCI DSS, OWASP, CIS Controls, and other applicable security frameworks.
Participate in security audits and compliance reviews.
Assist in developing and enforcing application security policies and procedures.
Ensure application security activities meet internal governance requirements and industry best practices.

Required Qualifications

Education

Bachelor’s Degree in Cybersecurity, Information Security, Computer Science, Software Engineering, Information Technology, or a related field.

Certifications (Preferred)

One or more of the following certifications are highly desirable:

Certified Secure Software Lifecycle Professional (CSSLP)
GIAC Web Application Penetration Tester (GWAPT)
Certified Application Security Engineer (CASE)
Certified Ethical Hacker (CEH)
Offensive Security Web Expert (OSWE)
Offensive Security Certified Professional (OSCP)
Certified Information Systems Security Professional (CISSP)

Experience

Minimum of three (3) years of hands-on experience in application security operations.
Experience with application security testing and vulnerability management processes.
Experience supporting secure software development initiatives.
Experience working with developers, DevOps, and infrastructure teams in enterprise environments.

Required Technical Skills