Application Security Engineer

📋 Description

• Own recurring AppSec activities across multiple product teams.
• Review vulnerabilities from scanners, tests, bug reports; guide focus.
• Validate fixes and suggest compensating controls when needed.
• Improve AppSec workflows by tuning checks and CI/CD integration.
• Translate security findings into actionable guidance for engineers.
• Promote secure-by-default practices and clear review standards.

🎯 Requirements

• Hands-on knowledge of web/API security, auth, sessions, secrets.
• Secure code reviews experience in Java, TypeScript, PHP.
• Experience leading threat modeling and turning outcomes into requirements.
• Experience managing SAST, SCA, DAST, secrets scanners; CI/CD integration.
• Knowledge of OAuth/OIDC, service-to-service auth, secrets management, cloud/container security.
• Ability to prioritize findings by exploitability, impact, and remediation effort.
• Strong written and verbal communication with engineers, leads, and stakeholders.
• Sound judgment using AI-assisted workflows; validate correctness and context.

🎁 Benefits

• 28 calendar days of paid vacation
• Sick Leave Compensation (5 Paid Uncertified Sick Days)
• Parental Leave: 18 Weeks Maternity / 4 Week Paternity
• 2 Volunteer Days
• Health Insurance (Employees + Dependents)
• Life Insurance Plan