Application Security Engineer

We are looking for a Japanese Bilingual Junior Application Security Engineer to support application security initiatives across web, mobile, and API applications.

The role will focus on penetration testing, security assessments, secure code reviews, vulnerability management, and security testing throughout the SDLC. The ideal candidate should have a strong foundation in application security principles and hands-on experience with security testing tools and code review practices.

Key Responsibilities:

• Support application penetration testing for web, mobile, and API applications
• Conduct application security assessments and identify security weaknesses
• Perform secure coding assessments and static code analysis
• Identify, validate, document, and track vulnerabilities
• Provide remediation recommendations to development teams
• Review source code for common security vulnerabilities and coding best practices
• Collaborate with developers and security teams to resolve security findings
• Support vulnerability assessments and security testing throughout the SDLC
• Prepare security assessment reports and communicate findings to technical and non-technical stakeholders
• Stay updated on emerging application security threats, vulnerabilities, and security standards

Must-Have Skills & Experience:

• 3 years of experience in Application Security, Vulnerability Assessment, Penetration Testing, or related security roles
• Understanding of OWASP Top 10 and common web application vulnerabilities
• Hands-on experience with security testing and vulnerability scanning tools
• Knowledge of secure coding principles and code review practices
• Familiarity with application architectures, APIs, and web technologies
• Basic understanding of SDLC and DevSecOps
• Strong analytical and problem-solving skills
• Experience/exposure to source code review in Java, .NET, Python, JavaScript, or similar languages
• Understanding of authentication, authorization, and secure design principles
• Experience working with developers and security teams in an enterprise environment
• Japanese bilingual communication skills