RemoteLeaf Logo
Log in Sign up

Application Security Engineer

3 weeks, 4 days ago
Portugal
Full-time
Senior
Application Security Engineer
Cybersecurity
Agile AWS CI/CD CloudFormation Docker GitLab Helm JavaScript Kubernetes Python Shell Scripting Terraform TypeScript
Apply Now
BrainRocket

BrainRocket

BrainRocket is an innovative IT software development company based in Cyprus, dedicated to providing cutting-edge solutions and services to clients worldwide. With a focus on creating a healthy and united work environment, BrainRocket attracts talented...

Internet Software & Services
251-1K
Founded 2020
View All Jobs 15

Description

  • Collaborate with other teams to achieve complex security objectives.
  • Design security architecture from cloud infrastructure to application using secure-by-design principles.
  • Work with product managers, architects, and developers to implement security controls across the platform ecosystem and products.
  • Validate security implementations in infrastructure, application deployment manifests, and CI/CD pipelines.
  • Define policies, controls, and capabilities to protect products and environments.
  • Build and validate automated declarative threat models.
  • Participate in engineering product planning cycles and committees.
  • Oversee security aspects of migrating products and services from data center environments to public cloud, including AWS.
  • Advise product and application teams on cybersecurity best practices.

Requirements

  • Experience integrating security scanning and tooling into the development pipeline.
  • Experience analyzing and securing microservices and applications built with JavaScript and TypeScript.
  • Experience with CI/CD pipelines such as GitLab or Jenkins and infrastructure-as-code tools such as Terraform, Helm, or CloudFormation.
  • Hands-on development experience with Python and shell scripting.
  • Strong understanding of supply chain security, software integrity, and secure software delivery.
  • Experience with Docker and mesh technologies such as Istio.
  • Experience with architecture and security reviews, threat modeling, and application risk is highly desirable.
  • Experience working with Agile methodologies.
  • Knowledge of privacy laws and regulations such as GDPR is desired.
  • Familiarity with industry regulations, frameworks, and practices such as PCI, ISO 27001, and NIST.
  • In-depth experience architecting secure services on Kubernetes is preferred.
  • Extensive experience architecting secure services on AWS or in on-premise data centers is preferred.
  • Security-related professional certifications such as CISSP, CISM, CCSK, CCSP, or CEH are highly desirable.
  • Global Remote Mobility is available for senior roles in selected jurisdictions.

Benefits

  • Learning and development opportunities with challenging tasks.
  • Relocation package including tickets, hotel stay for up to 2 weeks, and visa relocation support for employees and family members.
  • Partial compensation for English and Portuguese language classes.
  • Partial compensation for tennis and padel lessons.
  • Urban Sport membership with access to 50+ sports and wellness activities.
  • Private medical coverage including inpatient, outpatient, dental care, annual check-ups, and maternity support.
  • 24 non-business days per year plus 6 paid sick days.
  • Transport compensation of 200 euros net per month.
  • Competitive remuneration with annual review.
  • Teambuilding activities.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Evolve Security Academy

Senior Application Security Tester & AI Red Team Subject Matter Expert

Evolve Security Academy 11-50 Internet Software & Services

Evolve Security is seeking a senior offensive security specialist to lead complex web, API, and AI red team engagements while defining the firm’s testing methodology for LLM-enabled and agentic systems.

United States Full-time Senior AI (Artificial Intelligence) Application Security Engineer
Bash GraphQL JavaScript JWT Metasploit Nmap OpenID Connect Penetration Testing Postman PowerShell Python REST API SAML SPA TypeScript
7 hours, 20 minutes ago
Virtualitics

Lead AppSec Engineer

Virtualitics 51-250 IT Services

Virtualitics is seeking a Lead Application Security Engineer to shape secure AI and application security practices for defense, government, and critical infrastructure systems.

United States Full-time Lead Application Security Engineer
$150k-$220k
AWS Azure Docker GCP Kubernetes
11 hours, 3 minutes ago
GitLab

VP of Product Security

GitLab 1K-5K Internet Software & Services

GitLab is hiring a Vice President of Product Security to lead security strategy and execution for its AI-powered DevSecOps platform, with responsibility for embedding security into product design, delivery, and the supporting cloud and infrastructure systems.

United States Full-time Executive Application Security Engineer Product Manager
$298k-$360k
CI/CD DevSecOps JavaScript Microservices OWASP Secrets Management Serverless
1 day, 14 hours ago
CookUnity

Senior Application Security Engineer

CookUnity 251-1K Hotels, Restaurants & Leisure

CookUnity is hiring a founding Application Security team member to help secure its engineering organization’s applications and build security into the software lifecycle.

Latin America Full-time Senior Application Security Engineer
Agile AWS Azure Burp Suite CI/CD DevSecOps Docker GCP Java Kotlin Kubernetes OAuth OpenID Connect OWASP Penetration Testing SAML TypeScript
4 days, 11 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers