Application Development Security Associate

Job Description

About Task Us:
Task Us is a provider of outsourced digital services and next-generation customer experience to fast-growing technology companies, helping its clients represent, protect and grow their brands. Leveraging a cloud-based infrastructure, Task Us serves clients in the fastest-growing sectors, including social media, e-commerce, gaming, streaming media, food delivery, ride-sharing, HiTech, Fin Tech, and Health Tech.

The People First culture at Task Us has enabled the company to expand its workforce to approximately 45,000 employees globally. Presently, we have a presence in twenty-three locations across twelve countries, which include the Philippines, India, and the United States.

It started with one ridiculously good idea to create a different breed of Business Processing Outsourcing (BPO)! We at Task Us understand that achieving growth for our partners requires a culture of constant motion, exploring new technologies, being ready to handle any challenge at a moment's notice, and mastering consistency in an ever-changing world.

What We Offer:

At Task Us, we prioritize our employees' well-being by offering competitive industry salaries and comprehensive benefits packages.

Our commitment to a People First culture is reflected in the various departments we have established, including Total Rewards, Wellness, HR, and Diversity. We take pride in our inclusive environment and positive impact on the community. Moreover, we actively encourage internal mobility and professional growth at all stages of an employee's career within Task Us. Join our team today and experience firsthand our dedication to supporting People First.

Overview

We are looking for an enthusiastic and detail-oriented Associate - Application development Security to join our growing Security team. In this role, you will help ensure that security is embedded throughout the Software Development Lifecycle (SDLC) and support the implementation of our Dev Sec Ops  program. This position is ideal for individuals at the beginning of their career who are eager to gain hands-on experience in secure application development lifecycle, automated security testing, and modern Dev Sec Ops  practices and cloud security.

So what does an Application Development Security Associate really do Think of yourself as someone who will do the application design reviews, security testing, critical code reviews, and Business document review, help in the remediation and mitigation of audit findings in adherence to standards and safe practices, conduct research on emerging practices, services, protocols, and standards in support of system security and compliance enhancement and development efforts.

Work closely with the development team to build secure software.

Responsibilities

Secure Software Development Lifecycle (SSDLC):

Collaborate with developers and architects to incorporate security requirements during design and

development phases.

Assist in building and maintaining secure coding guidelines and policies aligned with industry standards

(e.g., OWASP, NIST).

Support threat modeling, risk assessments, and security design reviews for new applications and features.
Participate in security-focused reviews during code commits, builds, and releases.

Security Testing & Vulnerability Analysis

Execute automated and manual security testing (SCA, SAST, DAST) across applications during development

and UAT phases.

Should be able to perform Software Composition Analysis
Perform secure code review and tests on critical products and features
Use security tools (e.g., Snyk, Burp Suite, Invicti) to identify, validate, and triage security vulnerabilities.
Identify security flaws and suggest remediations based on Open Web Application Security Project

(OWASP) and other secure Software Development Life Cycle (SDLC) standards and frameworks.

Support remediation efforts by working with developers to explain findings and recommend secure

alternatives.

Maintain records of vulnerabilities, false positives, and mitigation strategies.

Dev Sec Ops  Integration

Work with CI/CD pipelines to automate security checks and enforcement (e.g., Git Hub Actions, Jenkins).
Integrate and maintain…