Application Security Engineer – Vulnerability Discovery

About the role

We are seeking an Application Security Engineer focused on vulnerability discovery to join a partner organization in Ireland. The role will strengthen application security by identifying, analysing and reducing vulnerabilities across modern software environments, working closely with engineering and product teams throughout the software development lifecycle.

Key responsibilities

• Identify security risks and improve vulnerability management processes.
• Triage, validate, prioritize and manage vulnerabilities discovered through manual reviews, automated tools, bug bounty programs and AI‑assisted platforms.
• Partner with software engineering and product teams to drive remediation, provide actionable guidance and ensure timely resolution based on risk and severity.
• Review security‑related pull requests, source code changes and development workflows to spot vulnerabilities and recommend secure implementations.
• Analyze findings from AI‑powered security tools, reduce false positives and enhance detection workflows.
• Participate in security incident response, investigations and root‑cause analysis.
• Support and enhance secure SDLC practices across engineering organisations.
• Develop security tooling, automation and workflows to improve detection coverage and operational efficiency.
• Configure, optimise and maintain vulnerability scanning platforms, including policies, schedules and reporting.
• Track remediation progress, security metrics and risk‑reduction initiatives, providing visibility to stakeholders.
• Collaborate with security architecture and development teams to refine discovery, prioritisation and remediation strategies.
• Create documentation, best‑practice guides and educational resources to promote secure coding.
• Participate in an on‑call rotation for security triage, code reviews and application security requests.

Required profile

• Experienced application security professional with strong technical skills and a proactive mindset.
• Proven ability to partner effectively with development teams and drive remediation efforts.

Required skills

• Vulnerability scanning platforms (configuration, optimisation, reporting).
• Security automation and tooling development.
• Secure coding practices and code review.
• Use of AI‑powered security tools and false‑positive reduction.
• Bug bounty program management.