Senior Application Security Engineer

Department: Cyber Security & Data Privacy Platform Location: Egypt, Cairo

We are seeking an experienced Application Security Engineer to join our team that is responsible for ensuring security across our Platforms and Agile Release Trains (ARTs). This role requires a strong technical background in cyber security, software development processes, and the ability to collaborate across multiple teams, including Cybersecurity, Product, and Infrastructure.

As a Senior Application Security Engineer, you will partner closely with the Application Security Product Manager to implement application security standards, manage and reduce risk, and drive mitigation efforts with infrastructure and application engineering teams. You will provide hands‑on technical leadership, helping embed practical, secure‑by‑design controls throughout the software development lifecycle.

YOUR NEW KEY RESPONSIBILITIES:

• Advance the application security strategy through multi-functional initiatives and cultural influence.

• Lead security initiatives across the SDLC and improve development practices through scalable automation.

• Conduct and guide security requirements and threat modeling early in design phases.

• Partner with product management, platform engineering, development and cyber defense teams to align business goals with security needs.

• Lead security architecture, design and code reviews.

• Perform hands-on security testing to identify risks and drive remediation with development teams.

• Drive software supply chain security practices to ensure protection against code, build, and artifact tampering across the CI/CD pipeline.

• Balance business and security risks through technically grounded, pragmatic recommendations.

• Translate lessons learned into reusable organizational assets that enhance overall security posture.

• Mentor engineers and practitioners, promoting secure-by-default thinking and shared accountability.

• Demonstrate proactive leadership, coordinating teams to deliver measurable security and business impact.

ARE THESE YOUR SECRET INGREDIENTS?

• 5+ years in information security and 2+ years in software development.

• Bachelor’s degree in computer science, Information Security, or related field, or equivalent.

• At least one Cyber Security related certification, (e.g. ISC2 CISSP, EC-Council CEH, ISACA’s CSX, Microsoft Azure Security Associate, AWS Certified Security Specialty).

• Any Application Security certification, (e.g. EC-Council CASE, ISC2 CSSLP, OffSec OWSA, GIAC CWAD).

• Dedicated and proactive, finding opportunities and leading initiatives independently.

• Deep understanding of enterprise, cloud and cloud-native architectures and their secure design.

• Skilled in multiple programming languages (e.g., .NET, JavaScript, Python).

• Proven expertise in guiding security development and code evaluations and providing actionable, risk-based technical recommendations.

• Knowledge of application security best practices such as OWASP Top 10, OWASP SAMM/DSOMM, OWASP ASVS/MASVS.

• Expertise in network and web protocols (TCP/IP, TLS, HTTPS, OAuth 2.0, OpenID Connect) and common attack vectors.

• Hands-on experience integrating SAST, DAST, SCA, Secrets Scanning, Container Image Scanning into CI/CD pipelines.

• Hands‑on experience performing application security testing using industry‑standard tools such as Burp Suite and OWASP ZAP to identify, validate, and prioritize exploitable risks.

• Familiar with Agile, DevOps, and modern delivery practices.

• Hands-on experience with cloud and cloud-native technologies (Azure, Kubernetes, Containers) including secure configuration and identity management.

• Strong command of English language, written and verbal. Leadership & Soft Skills:

• Demonstrated technical leadership, acting as a security subject‑matter expert who influences architecture, design, and engineering decisions

• Strong project management and prioritization skills.

• Excellent communication and stakeholder management skills.

• Ability to work cross-functionally with product, engineering, and cybersecurity teams.

• Problem-solving mindset with a focus on driving results and continuous improvement.

ABOUT YOUR NEW TEAM: We are Coca-Cola Hellenic, a growth-focused consumer goods business and strategic bottling partner of the Coca-Cola Company. We bottle, distribute and sell an unrivalled range of products in 29 markets in Europe, Africa and Eurasia. As we do, we create value for all stakeholders, support socio-economic growth and build a more positive environmental impact. We bring together more than 30,000 people from over 70 nationalities, coming from five continents. The diversity of our markets, from mature to emerging economies, provides a wide range of attractive opportunities for growth. We nurture our talents. We give opportunities to people across all functions and levels, as well as different geographies, backgrounds and education. We are willing to take a risk on the people we believe in, even if they don’t have the perfect experience. We have faith in what every person can be. And although we have so much to be proud of, we always stay humble. We believe the real magic happens – for us and for you – when we OPEN UP.

AT COCA-COLA HBC, DIVERSITY HELPS US THRIVE At Coca-Cola HBC, we are an inclusive employer that thrives on diversity. This means our environment provides equal opportunities for all, regardless of race, color, religion, age, disability, sexual orientation, or gender identity. Join us in nurturing a culture where everyone belongs and contributes to our collective success.