Application Security Engineer
A
AwinApplication security
Berlin, Berlin, Germany; Madrid, Madrid, Spain; Milano, Milan, Italy; Warsaw, Masovian Voivodeship, Poland. We offer an international culture and flexibility through our hybrid/remote working scheme.Full-TimeSenior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Languages
- Good working proficiency in spoken and written English.
- Experience
- 5+ years in application security, product security or related technical roles.
- Required Skills
- AWSPHPPythonJavascriptTerraform
Requirements
- Have 5+ years of experience in application security, product security or related technical roles.
- Have experience working directly with software engineers and product managers to secure web applications.
- Have experience working in an Agile environment.
- Have good working proficiency in spoken and written English.
- Be proficient in a programming language such as JavaScript, PHP or Python.
- Have experience with AWS and cloud-native environments, containers and Terraform.
- Have hands-on experience with DAST, SAST and SCA tools.
- Have experience with reporting and dashboarding platforms.
- Bring interpersonal, communication, mentorship and training skills.
- Be able to work across two departments with multiple touch points.
Responsibilities
- Integrate SAST, DAST and dependency-scanning tools into CI/CD pipelines and IDEs, and automate security checks.
- Conduct threat-modeling sessions and pre-implementation security reviews with product and engineering teams.
- Guide developers on secure coding, perform targeted code reviews and provide actionable vulnerability remediation support.
- Identify, triage, track and report vulnerabilities across internal and external applications and systems.
- Support bug bounty finding validation and present vulnerability management reports to department heads.
- Advise teams on secure development of AI/LLM features and lead threat modeling for AI components.
- Support investigation and root cause analysis of application-layer incidents and contribute to post-incident reviews.
- Maintain the application security training program, deliver workshops and technical deep-dives, and contribute to playbooks and standards.
- Research industry threats and test ideas to reduce risk across the software supply chain and platforms.
View Full Description & ApplyYou'll be redirected to the employer's site
