RemoteLeaf Logo
Log in Sign up

HQ - Senior Application Security Engineer (Remote)

2 months, 1 week ago
Spain, Europe
Full-time
Senior
Application Security Engineer
Software Development
Burp Suite CI/CD HTTP Kubernetes Penetration Testing Python TCP/IP TLS WAF
Apply Now
Jobandtalent

Jobandtalent

Jobandtalent is a world-leading job marketplace that connects workers with companies through its innovative app. With a focus on workforce optimization, the platform offers thousands of flexible jobs and cutting-edge technology to streamline the hiring...

Professional Services
1K-5K
Founded 2009
$1300M raised
View All Jobs 4

Description

  • Act as the application security subject matter expert and partner with Engineering and Product teams to embed security throughout the SDLC.
  • Lead application security reviews, threat modelling, code reviews, and penetration testing to identify and reduce risk.
  • Design, implement, and automate security controls across CI/CD pipelines, including SAST, SCA, and related AppSec tooling.
  • Drive the technical roadmap for the application security program and scale secure development practices across the organization.
  • Improve and manage application security controls, including WAF, Kubernetes security, and vulnerability management.
  • Mentor Security Champions and junior engineers to build a stronger security culture across development teams.
  • Define and communicate application security metrics to measure risk reduction and program effectiveness.

Requirements

  • 3-4 years of experience in Information Security, including at least 2 years in Application Security.
  • Strong experience with Secure SDLC, threat modelling, application security reviews, and secure code reviews.
  • Hands-on experience with SAST, SCA, and automated security testing integrated into CI/CD pipelines.
  • Strong knowledge of OWASP Top 10, OWASP ASVS, API security, and secure coding best practices.
  • Experience implementing and managing WAF solutions and conducting internal penetration testing, including APIs using Burp Suite.
  • Solid understanding of Kubernetes security, cloud-native applications, and networking fundamentals (HTTP, HTTPS, TCP/IP).
  • Basic scripting or development experience, preferably in Python.
  • Excellent communication skills and the ability to influence engineering teams and explain security concepts to technical and non-technical stakeholders.

Benefits

  • Fully remote work with flexibility within ±1 hour of CET.
  • Competitive pay.
  • Meaningful benefits.
  • Opportunity to shape work at scale for millions of workers.
  • Equal opportunity employer with a diverse and inclusive culture.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Coforge

Analista de Seguridad de Aplicaciones Mid

Coforge 10K-50K IT Services

Coforge busca un Analista Mid de Seguridad de Aplicaciones para analizar y fortalecer la seguridad de APIs, aplicaciones web y código durante el ciclo de desarrollo de software, en modalidad remota desde Lima, Perú.

Peru Mid Level Application Security Engineer
Azure Git GitHub
4 hours, 19 minutes ago
Trail of Bits

Security Engineer II, Application Security

Trail of Bits 51-250 Internet Software & Services

Trail of Bits is hiring a remote U.S.-based Security Engineer II to conduct hands-on application security assessments, discover and validate vulnerabilities, build custom tooling, and deliver actionable findings to clients.

United States Full-time Junior Application Security Engineer
$140k-$180k
Ansible C C++ Cybersecurity Go Helm JavaScript Kubernetes Python Rust Terraform TypeScript
4 hours, 49 minutes ago
Quanata

Staff Security Engineer [Remote-US]

Quanata 201-500 information technology & services

Quanata, LLC is seeking a Staff Security Engineer to secure AI-enabled systems, applications, cloud infrastructure, and platforms while shaping security standards and initiatives across the organization.

United States Full-time Lead Application Security Engineer
$290k-$400k
AWS CI/CD Cybersecurity DevSecOps Docker Generative AI GitHub Actions Go Java JavaScript Jenkins Kubernetes Machine Learning Python Secrets Management SIEM Terraform TypeScript
1 day, 4 hours ago
Chainguard

Senior Product Security Engineer

Chainguard 51-250 Internet Software & Services

Chainguard is hiring a security engineer to embed secure software supply chain practices into CI/CD and cloud-native product development, reducing risk across its Kubernetes, cloud, and open source software stack.

United States Full-time Senior Application Security Engineer
$157k-$184k
AWS CI/CD GCP GitHub Actions Go Kubernetes OWASP Penetration Testing Python Secrets Management Tekton
6 days, 4 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers