Information Security Engineer – Application Security
New
C
CamundaApplication security
Fully remote and global; Work from anywhereFull-TimeMiddle
SalaryThe Annual Total Target Cash (base salary + 100% variable target, where applicable) shown below spans from the minimum in a Standard market to the maximum in a Major market: United States: $119,900.00 to $193,200.00; United Kingdom: £75,300.00 to £123,800.00; Singapore: S$148,900.00 to S$223,300.00.
Apply NowOpens the employer's application page
Job Details
- Experience
- Around 3+ years in security or software engineering, with at least 2 of them working on application or product security
- Required Skills
- JavaCI/CD
Requirements
- Around 3+ years of experience in security or software engineering, including at least 2 years in application or product security.
- Experience at a SaaS or software product company, working closely with engineering teams that ship frequently through modern CI/CD and cloud environments.
- Hands-on vulnerability triage experience using tools such as Snyk, Trivy, Semgrep, CodeQL, or similar.
- Ability to distinguish real vulnerabilities from false positives and assess exploitability in context, including CVSS and configuration.
- Experience with threat modeling and design reviews on real systems; STRIDE is given as an example.
- Ability to read Java well enough to follow data flow and identify security bugs.
- Ability to write scripts and small tools and contribute to an existing codebase with review.
- Daily experience using AI coding agents such as Claude Code, Cursor, Copilot, or similar, with judgment to review their output.
- Ability to communicate risk clearly with engineers and explain it to people who are not security specialists.
Responsibilities
- Triage findings from SCA, container and code scanning, external reports, and internal security testing; assess impact and coordinate fixes, mitigations, or acceptance with engineering through release.
- Run threat modeling sessions and design reviews with R&D teams for new features and architecture changes, and turn findings into prioritized actions.
- Use and improve LLM-assisted tools, agents, prompts, and reusable skills to review code, validate findings, and reproduce issues.
- Contribute to the CVE registry and automation connecting scanners, engineering teams, and customer communication.
- Answer engineers’ security questions, review pull requests, improve guidelines, and occasionally run sessions or workshops.
- Share the Information Security on-call rotation and help investigate and resolve security incidents.
- Help write customer security advisories, answer customer security questions, and support audits.
View Full Description & ApplyYou'll be redirected to the employer's site
