Application Security Engineer

🔥 16 hours ago

🇺🇦 Ukraine – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

💻 Application Engineer

👻 Ghost score 12%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Capgemini

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1967

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

Capgemini is a global leader in partnering with businesses to transform and manage their operations by harnessing the power of technology. With expertise across a wide array of industries such as aerospace, automotive, banking, and healthcare, Capgemini provides a constantly evolving portfolio of services to meet the ever-changing needs of their clients. Their offerings include cloud, cybersecurity, data and artificial intelligence, and enterprise management, among others. Capgemini also emphasizes innovation and sustainability, helping companies achieve digital transformation while promoting environmental and social responsibility. Additionally, Capgemini provides career opportunities across various levels and professions, encouraging innovation and diversity in its workforce.

📋 Description

• Collaborate with development teams, Site Reliability Engineering, and other stakeholders to strengthen security best practices throughout the SDLC • Identify security improvements independently and implement them • Implement, manage, and automate vulnerability management processes • Prioritize and remediate vulnerabilities from internal scans, penetration tests, and bug bounties • Conduct threat modeling, code audits, and design reviews with engineers • Provide actionable security recommendations and workable solutions • Establish and automate threat hunting capabilities • Enhance logging capabilities related to security events • Integrate and manage dynamic and static code analysis tools • Ensure security tools operate effectively within the development pipeline

🎯 Requirements

• 4+ years experience in secure development or application security • Deep knowledge of security concepts such as authentication and web architecture • Experience with Node.js, Go, or similar technologies • Experience running bug-bounty, penetration testing, and vulnerability scanning programs • Experience setting up and maintaining SAST, DAST, IAST, and SCA tooling • Experience using assessment tools such as Burp, ZAP, Qualys, and Nessus • Experience building and maintaining WAF solutions • Familiarity with industry security practices, standards, and regulations such as FedRAMP, SOC2, and HIPAA is a plus • Familiarity with GCP/AWS and Kubernetes infrastructure security is a plus • Self-motivated and goal driven, able to identify what needs to be done and do it • Able to respectfully challenge teammates and managers in pursuit of excellence • Strong sense of urgency with an action-oriented mindset • Able to collaborate and adapt to shifting priorities • Comfortable with asynchronous communication including Slack, email, and Zoom

🏖️ Benefits

• Health insurance from the first days, regardless of the probationary period • Christmas holidays from December 25 to December 31 • Cooperation with Superhumans center and Veteran HUB • Psychological counseling provided by the Veteran Hub • Internal policy making the company friendly to military and veterans