Application Security Engineer

📋 Description

• Own recurring AppSec activities for multiple product teams.
• Conduct secure design reviews, threat modeling, and code review.
• Validate findings and guide remediation with practical tradeoffs.
• Improve AppSec workflows by tuning checks and CI/CD integration.
• Explain findings in practical product terms with actionable priors.
• Promote secure-by-default practices across the SDLC.

🎯 Requirements

• Strong hands-on knowledge of web/API security, auth, secrets.
• Secure code reviews in Java, TypeScript, PHP; clear remediation.
• Leads threat modeling; translates outcomes into actionable requirements.
• Experience with SAST, SCA, DAST, secrets tools; CI/CD integration.
• OAuth/OIDC, service-to-service auth, cloud/container security.
• Prioritize findings by exploitability and business impact.

🎁 Benefits

• 5 weeks of paid vacation.
• Sick leave: 5 uncertified days + 2 weeks paid + 4 weeks at 80%.
• Fully paid parental leave: 18 weeks maternity / 4 weeks paternity.
• 2 volunteer days.
• Meal vouchers CZK 220 per day.
• Hybrid working model.