Senior Application Security Engineer

📋 Description

• Define and own the metrics framework for the AppSec program, including mean time to remediate
• Establish baselines for each metric to track program trajectory, and build recurring
• Own and maintain the AppSec scanning stack: SAST, DAST, dependency (SCA), and secrets detection.
• Tune scanner configurations to reduce noise and false positives, ensure accurate findings in
• Establish and maintain PR security review practices and track adherence.
• Lead and coordinate third-party penetration testing engagements from scoping through remediation

🎯 Requirements

• Bachelor's degree in Computer Science, Information Security, or related field (or equivalent
• 5+ years of experience in application security, secure code review, or a closely related
• Availability to work in a hybrid work model.
• Demonstrated experience building or owning security metrics and reporting.
• Hands-on experience with SAST, DAST, SCA tooling, and vulnerability management platforms (e.g.
• Experience coordinating or performing penetration testing, including working with external vendors.

🎁 Benefits

• Competitive pay: 18 900 - 23 700 PLN net on B2B.
• Training budget 3500 PLN gross per year.
• Access to e-learning platforms (O’Reilly).
• Fully paid private healthcare in LuxMed.
• Access to the Worksmile platform with a monthly top-up.
• Subsidized breakfast and lunch through vending machine in Kraków; weekly lunches in Gdańsk.