Application Security Engineer

Build client-critical software at Ke Y2

Moon

At Ke Y2

Moon Solutions, you will work on real client problems that affect revenue, operations, and customer experience. We combine agency speed with engineering discipline, so people who join us get broad ownership and measurable impact.

Direct exposure to product, architecture, and client decision-making

A client expanding into enterprise accounts is facing recurring security findings late in release cycles, delaying launches and increasing remediation cost.

Security reviews currently happen too late. We need someone who can integrate practical controls into everyday engineering work without creating a delivery bottleneck.

You will design secure-by-default engineering practices and help teams close risk gaps earlier in the software lifecycle.

• SAST
• DAST
• OWASP
• SIEM
• CI/CD Security

• Define actionable security checkpoints integrated into planning and release flow using SAST/DAST and dependency scanning signals
• Support teams with secure design guidance during feature definition based on OWASP-aligned threat scenarios
• Build clear remediation workflows and SLA expectations for identified risks across application and pipeline layers
• Partner with delivery leadership to track security posture improvements with measurable, audit‑ready reporting

• You have reduced recurring security findings in active product teams through practical engineering controls
• You can guide engineers with practical controls, not policy‑heavy blockers, across CI/CD and app layers
• You understand tradeoffs between release pressure and risk exposure in real business delivery conditions
• You communicate security priorities clearly to technical and non‑technical stakeholders with remediation options

• Experience preparing teams for enterprise security questionnaires and control evidence requests
• Experience with secure architecture reviews in service‑oriented or microservice environments
• Experience driving security training that engineering teams actually adopt in daily workflows