Application Security Engineer
Ensuring application security across all stages of the SDLC
Level:
Programming Fundamentals
7 skills · 35 requirements| Skill | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| Algorithms & Data Structures | |||||
| Algorithms & Complexity | Awareness | Working | Advanced | Expert | Expert |
| Data Structures | Awareness | Working | Advanced | Expert | Expert |
| OOP & Design Patterns | |||||
| OOP & SOLID Principles | Awareness | Working | Advanced | Expert | Expert |
| Design Patterns | Awareness | Working | Advanced | Expert | Expert |
| Concurrency & Parallelism | |||||
| Multithreading | Awareness | Working | Advanced | Expert | Expert |
| Async Programming | Awareness | Working | Advanced | Expert | Expert |
| Clean Code & Refactoring | |||||
| Code Quality & Refactoring | Awareness | Working | Advanced | Expert | Expert |
Backend Development
1 skills · 5 requirements| Skill | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| Caching | |||||
| Redis | Awareness | Working | Advanced | Expert | Expert |
Database Management
1 skills · 5 requirements| Skill | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| Relational Databases | |||||
| PostgreSQL | Awareness | Working | Advanced | Expert | Expert |
API & Integration
6 skills · 30 requirements| Skill | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| REST API | |||||
| REST API Design | Awareness | Working | Advanced | Expert | Expert |
| GraphQL | |||||
| GraphQL Design | Awareness | Working | Advanced | Expert | Expert |
| API Gateway & Service Communication | |||||
| Webhooks & Integrations | Awareness | Working | Advanced | Expert | Expert |
| API Management | |||||
| API Documentation | Awareness | Working | Advanced | Expert | Expert |
| API Testing | Awareness | Working | Advanced | Expert | Expert |
| Rate Limiting & Throttling | Awareness | Working | Advanced | Expert | Expert |
Cloud & Infrastructure
5 skills · 23 requirements| Skill | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| Containerization | |||||
| Docker | Awareness | Working | Advanced | Expert | Expert |
| Container Security | |||||
| Container Security Scanning | Awareness | Working | Advanced | Expert | Expert |
| Kubernetes & Orchestration | |||||
| Kubernetes Core | Awareness | Working | Advanced | Expert | Expert |
| Cloud Providers | |||||
| AWS | Awareness | Working | Advanced | Expert | Expert |
| Networking | |||||
| Network Fundamentals | Awareness | Working | Advanced | — | — |
DevOps & CI/CD
1 skills · 5 requirements| Skill | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| CI/CD | |||||
| GitHub Actions / GitLab CI | Awareness | Working | Advanced | Expert | Expert |
Testing & QA
3 skills · 15 requirements| Skill | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| Unit Testing | |||||
| Unit Testing | Awareness | Working | Advanced | Expert | Expert |
| Integration Testing | |||||
| Integration Testing | Awareness | Working | Advanced | Expert | Expert |
| Specialized Testing | |||||
| Security Testing | Awareness | Working | Advanced | Expert | Expert |
Security
18 skills · 90 requirements| Skill | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| Application Security | |||||
| OWASP & Application Security | Awareness | Working | Advanced | Expert | Expert |
| SAST/DAST | Awareness | Working | Advanced | Expert | Expert |
| Secure Coding Practices | Awareness | Working | Advanced | Expert | Expert |
| Threat Modeling | Awareness | Working | Advanced | Expert | Expert |
| Dependency Vulnerability Scanning | Awareness | Working | Advanced | Expert | Expert |
| Infrastructure Security | |||||
| Secrets Management | Awareness | Working | Advanced | Expert | Expert |
| Network Security | Awareness | Working | Advanced | Expert | Expert |
| Cloud Security | Awareness | Working | Advanced | Expert | Expert |
| Kubernetes Security | Awareness | Working | Advanced | Expert | Expert |
| Authentication & Authorization | |||||
| JWT / OAuth2 / OIDC | Awareness | Working | Advanced | Expert | Expert |
| RBAC / ABAC Authorization | Awareness | Working | Advanced | Expert | Expert |
| Compliance | |||||
| GDPR / 152-FZ Compliance | Awareness | Working | Advanced | Expert | Expert |
| SOC2 Compliance | Awareness | Working | Advanced | Expert | Expert |
| PCI DSS | Awareness | Working | Advanced | Expert | Expert |
| Supply Chain Security | |||||
| Supply Chain Security | Awareness | Working | Advanced | Expert | Expert |
| Incident Response | |||||
| Incident Response Process | Awareness | Working | Advanced | Expert | Expert |
| Digital Forensics Basics | Awareness | Working | Advanced | Expert | Expert |
| Vulnerability Management | Awareness | Working | Advanced | Expert | Expert |
AI-Assisted Development
4 skills · 20 requirements| Skill | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| AI Coding Assistants | |||||
| GitHub Copilot | Awareness | Working | Advanced | Expert | Expert |
| Cursor IDE | Awareness | Working | Advanced | Expert | Expert |
| ChatGPT / Claude | Awareness | Working | Advanced | Expert | Expert |
| Prompt Engineering | |||||
| Prompt Engineering for Code | Awareness | Working | Advanced | Expert | Expert |
Architecture & System Design
1 skills · 5 requirements| Skill | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| System Design | |||||
| System Design Fundamentals | Awareness | Working | Advanced | Expert | Expert |
Observability & Monitoring
4 skills · 20 requirements| Skill | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| Logging | |||||
| Structured Logging | Awareness | Working | Advanced | Expert | Expert |
| ELK Stack | Awareness | Working | Advanced | Expert | Expert |
| Metrics & Monitoring | |||||
| Prometheus & Grafana | Awareness | Working | Advanced | Expert | Expert |
| Distributed Tracing | |||||
| OpenTelemetry | Awareness | Working | Advanced | Expert | Expert |
Version Control & Collaboration
2 skills · 10 requirements| Skill | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| Git & Workflows | |||||
| Git Advanced | Awareness | Working | Advanced | Expert | Expert |
| Code Review | |||||
| Code Review | Awareness | Working | Advanced | Expert | Expert |
Documentation
1 skills · 5 requirements| Skill | Junior | Middle | Senior | Lead | Principal |
|---|---|---|---|---|---|
| Technical Documentation | |||||
| Runbook & Playbook Writing | Awareness | Working | Advanced | Expert | Expert |