Nebius

Nebius

Nebius enables B2B companies to build local hyperscaling cloud platforms with cost-effective GPUs, InfiniBand network, and 50% less compute cost. They offer managed Kubernetes and a launch-ready business model for innovative cloud solutions.

Internet Software & Services
51-250

Description

  • Build and maintain ASPM tools and their rules.
  • Identify, analyze, and remediate application security vulnerabilities using ASPM and related tools.
  • Collaborate with development teams to integrate security best practices into the SDLC.
  • Conduct manual and automated penetration testing of applications.
  • Develop and maintain secure coding guidelines for development teams.
  • Facilitate threat modeling and risk assessments for new and existing applications.
  • Stay current on emerging security threats, vulnerabilities, and mitigation techniques.
  • Serve as an application security subject matter expert for other teams.

Requirements

  • 4+ years of experience in application security.
  • Strong knowledge of common application security risks, including the OWASP Top 10, and how to mitigate them.
  • Experience with secure coding practices in Python, Go, Java, or JavaScript.
  • Proficiency in a common programming language such as Go or Python, with willingness to learn Go if necessary.
  • Hands-on experience with security testing tools such as Burp Suite, ZAP, and Semgrep.
  • Understanding of authentication protocols such as SAML or OIDC.
  • Experience conducting threat-modeling sessions.
  • Strong problem-solving and analytical skills.
  • Good written and verbal communication skills in English.
  • Willingness to learn new things and work independently.
  • Confidence presenting ideas and responding well to feedback is a plus.
  • Experience designing, building, and maintaining security automation is a plus.
  • Experience translating compliance and regulatory requirements into technical specifications is a plus.
  • Experience exploiting vulnerabilities in web applications, Linux kernels, containers, and networks is a plus.
  • Security certifications such as OSCP or OSWE are a plus.
  • Coding interviews are part of the hiring process.
  • Must be authorized to work in the country of application and provide proof of employment eligibility.

Benefits

  • Competitive compensation with a base salary range of €75,000 to €240,000 EUR.
  • Benefits package with compensation determined by experience, skills, qualifications, level, and location.
  • Career growth and learning opportunities.
  • Flexibility and ownership.
  • Collaborative and innovative culture.
  • Opportunity to work on impactful AI projects.
  • International environment with talented teams.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Product Security Engineer

Chainguard 51-250 Internet Software & Services

Chainguard is hiring a security engineer to embed secure software supply chain practices into CI/CD and cloud-native product development, reducing risk across its Kubernetes, cloud, and open source software stack.

AWS CI/CD GCP GitHub Actions Go Kubernetes OWASP Penetration Testing Python Secrets Management Tekton
3 days, 4 hours ago

Product Security Engineer

Bugcrowd 1K-5K Internet Software & Services

Bugcrowd is hiring a Security Engineer to partner with engineering and product teams remotely, building secure-by-default systems and driving measurable application security outcomes.

AWS Docker GCP Go Java Kubernetes Python Ruby Terraform
1 week, 2 days ago

Staff Application & Product Security Engineer

Cleo 251-1K Internet Software & Services

Cleo is hiring a Staff Application Security Engineer to own secure product development and the security posture of its SaaS and customer-hosted products, partnering with engineering and security teams from design through release.

AWS Burp Suite CI/CD GitHub Go Java Jenkins Kubernetes Penetration Testing Python SAML Terraform TypeScript
1 week, 2 days ago

Application Security Engineer

Bugcrowd 1K-5K Internet Software & Services

Bugcrowd is seeking an Application Security Engineer to triage and validate vulnerability submissions across client bug bounty programs, communicate with researchers and customers, and escalate critical security incidents.

Burp Suite Nmap
2 weeks, 3 days ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers