Senior Application Security Engineer (Remote)

Stack

Responsibilities

• ▹Act as the Application Security SME, partnering with Engineering and Product teams to embed security throughout the SDLC
• ▹Lead application security reviews, threat modelling, code reviews and penetration testing to identify and mitigate security risks
• ▹Design, implement and automate security controls across CI/CD pipelines, including SAST, SCA and other AppSec tooling
• ▹Drive the technical roadmap of the Application Security program, improving secure development practices and scaling security initiatives across the organisation
• ▹Improve and manage application security controls, including WAF, Kubernetes security and vulnerability management
• ▹Mentor Security Champions and junior engineers, promoting a strong security culture across development teams
• ▹Define and communicate meaningful Application Security metrics to measure risk reduction and program effectiveness

Requirements

• ▹3-4 years of experience in Information Security, including at least 2 years in Application Security
• ▹Strong experience with Secure SDLC, threat modelling, application security reviews and secure code reviews
• ▹Hands-on experience with SAST, SCA and automated security testing integrated into CI/CD pipelines
• ▹Strong knowledge of OWASP Top 10, OWASP ASVS, API Security and secure coding best practices
• ▹Experience implementing and managing WAF solutions, as well as conducting internal penetration testing (including APIs using Burp Suite)
• ▹Solid understanding of Kubernetes security, cloud-native applications and networking fundamentals (HTTP, HTTPS, TCP/IP)
• ▹Basic scripting or development experience, preferably in Python
• ▹Excellent communication skills, with the ability to influence engineering teams and explain complex security concepts to technical and non-technical stakeholders

Soft skills

What we offer

• ▹Fully remote position with flexibility within plus or minus 1 hour of CET
• ▹Competitive pay and meaningful benefits

About the company

Job&Talent is an AI-powered workforce management platform for frontline industries. Headquartered in Madrid, it operates in 10 countries and is backed by investors including Atomico, Goldman Sachs, Kinnevik, BlackRock and SoftBank.