Senior/Staff Application Security Engineer
New
N
NebiusCloud infrastructure
Remote - EuropeFull-TimeStaff
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- 6+ years of experience in application security.
- Required Skills
- PythonJavaJavascriptGo
Requirements
- Have 6+ years of experience in application security.
- Know common application security risks, including the OWASP Top 10, and how to mitigate them.
- Have experience with secure coding practices in Python, Go, Java, or JavaScript.
- Be proficient in a common programming language such as Go or Python, with willingness to learn Go if necessary.
- Have hands-on experience with security testing tools such as Burp Suite, ZAP, or Semgrep.
- Understand authentication protocols such as SAML or OIDC.
- Have experience conducting threat-modeling sessions.
- Experience designing, building, and maintaining security automation is a bonus.
- Security certifications such as OSCP or OSWE are a bonus.
Responsibilities
- Build and maintain Application Security Posture Management (ASPM) at company scale.
- Automate and support SAST and SCA tools in CI/CD pipelines.
- Improve SAST and secrets detection rules while keeping false positives low.
- Identify, analyze, and remediate application security vulnerabilities.
- Collaborate with development teams to integrate security best practices into the software development lifecycle.
- Develop and maintain secure coding guidelines for development teams.
- Conduct threat-modeling sessions and risk assessments for new and existing applications.
- Provide development teams with instruments for security work, including threat modeling and vulnerability detection.
- Stay updated on security threats, vulnerabilities, and mitigation techniques.
- Serve as an application security subject matter expert to other teams.
View Full Description & ApplyYou'll be redirected to the employer's site
