Application Security Engineer

Role description

Role Overview

The Security Engineering Team is responsible for the strategic selection, implementation, management, and optimization of cybersecurity tools and technologies. The team is instrumental in fortifying the security posture, proactively identifying and responding to security threats, ensuring the resilience and protection of critical data, systems, and services.

What You Will Do

Identify and mitigate vulnerabilities, implement best security practices, collaborate with development teams, conduct penetration testing, develop secure coding guidelines, and facilitate threat modeling and risk assessments.

Why It Might Be a Fit

The ideal candidate will have a strong background in secure coding, vulnerability assessment, and penetration testing, with 4+ years of experience in application security and knowledge of common application security risks and mitigation techniques.

Requirements

• 4+ years of experience in application security
• Strong knowledge of common application security risks (e.g. OWASP Top 10) and how to mitigate them
• Experience with secure coding practices in languages such as Python, Go, Java, or JavaScript
• Proficiency in a common programming language (such as Go or Python) with a willingness to learn Go, if necessary
• Hands-on experience with security testing tools (Burp Suite, ZAP, Semgrep, etc.)
• Understanding of authentication protocols like SAML or OIDC
• Experience in conducting threat-modeling sessions
• Strong problem-solving and analytical skills
• Good written and verbal communication skills in English
• Willingness to learn new things
• Being comfortable working independently

Benefits

• Competitive compensation
• Career growth and learning opportunities
• Flexibility and ownership
• Collaborative and innovative culture
• Opportunity to work on impactful AI projects
• International environment and talented teams