HQ - Senior Application Security Engineer (Remote)

1 month, 2 weeks ago
Full-time
Senior
Software Development
Jobandtalent

Jobandtalent

Jobandtalent is a world-leading job marketplace that connects workers with companies through its innovative app. With a focus on workforce optimization, the platform offers thousands of flexible jobs and cutting-edge technology to streamline the hiring...

Professional Services
1K-5K
Founded 2009
$1300M raised

Description

  • Act as the application security subject matter expert and partner with Engineering and Product teams to embed security throughout the SDLC.
  • Lead application security reviews, threat modelling, code reviews, and penetration testing to identify and reduce risk.
  • Design, implement, and automate security controls across CI/CD pipelines, including SAST, SCA, and related AppSec tooling.
  • Drive the technical roadmap for the application security program and scale secure development practices across the organization.
  • Improve and manage application security controls, including WAF, Kubernetes security, and vulnerability management.
  • Mentor Security Champions and junior engineers to build a stronger security culture across development teams.
  • Define and communicate application security metrics to measure risk reduction and program effectiveness.

Requirements

  • 3-4 years of experience in Information Security, including at least 2 years in Application Security.
  • Strong experience with Secure SDLC, threat modelling, application security reviews, and secure code reviews.
  • Hands-on experience with SAST, SCA, and automated security testing integrated into CI/CD pipelines.
  • Strong knowledge of OWASP Top 10, OWASP ASVS, API security, and secure coding best practices.
  • Experience implementing and managing WAF solutions and conducting internal penetration testing, including APIs using Burp Suite.
  • Solid understanding of Kubernetes security, cloud-native applications, and networking fundamentals (HTTP, HTTPS, TCP/IP).
  • Basic scripting or development experience, preferably in Python.
  • Excellent communication skills and the ability to influence engineering teams and explain security concepts to technical and non-technical stakeholders.

Benefits

  • Fully remote work with flexibility within ±1 hour of CET.
  • Competitive pay.
  • Meaningful benefits.
  • Opportunity to shape work at scale for millions of workers.
  • Equal opportunity employer with a diverse and inclusive culture.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Mobile Software Engineer (iOS / Android), Identity & Security - India

JumpCloud 251-1K Internet Software & Services

JumpCloud is hiring a Senior Mobile Software Engineer to build secure native iOS and Android applications that protect enterprise identities through authentication, password management, and identity verification.

Android AWS CI/CD Encryption Espresso GCP GitHub Actions Go iOS Kotlin OpenID Connect REST API Swift WebSockets XCTest
3 hours, 19 minutes ago

Staff Application Security Engineer (R5949)

Bitly 51-250 Internet Software & Services

Shield AI is seeking a Staff Application Security Engineer to establish and scale a developer-centered secure software development and software supply-chain security program across its defense-technology engineering organization.

Burp Suite DevSecOps Kubernetes Microservices SonarQube
3 hours, 49 minutes ago

Application Security Engineer

Bugcrowd 1K-5K Internet Software & Services

Bugcrowd is hiring a remote Application Security Engineer to triage and validate vulnerability submissions for large-scale bug bounty programs while coordinating with clients and security researchers.

Burp Suite Nmap
1 day, 2 hours ago

Senior Product Security Engineer

Alphasense 51-250 Industrial Conglomerates

AlphaSense is hiring a Senior Product Security Engineer to secure its AI-native market intelligence platform by embedding AI/ML security, secure architecture, and assurance practices across the product lifecycle.

CI/CD DevSecOps Encryption Java JavaScript Kubernetes Python SAML Secrets Management TLS
1 day, 3 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers