Senior Application Security Engineer

🕒 August 5

🇪🇸 Spain – Remote

⏰ Full Time

🟠 Senior

💻 Application Engineer

👻 Ghost score 12%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Jobandtalent

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2009

🎯 Recruiter

👥 HR Tech

🏪 Marketplace

💰 $250M Debt Financing on 2022-05

Recruitment • HR Tech • Marketplace

Jobandtalent is an innovative platform that connects job seekers with steady work opportunities at over 2,500 companies. The platform simplifies the job search process by eliminating the need for resumes, allowing job seekers to find and get hired for jobs quickly and easily through their app. For companies, Jobandtalent offers access to reliable and trusted workers ready to start on-site within hours, leveraging a powerful technology platform. The company focuses on making the hiring process efficient and hassle-free for both job seekers and employers.

📋 Description

• Act as the Application Security Subject Matter Expert, partnering with Engineering and Product teams to embed security throughout the SDLC • Lead application security reviews, threat modelling, code reviews and penetration testing • Design, implement and automate security controls across CI/CD pipelines, including SAST, SCA and other AppSec tooling • Drive the technical roadmap of the Application Security program • Improve and manage application security controls, including WAF, Kubernetes security and vulnerability management • Mentor Security Champions and junior engineers • Define and communicate Application Security metrics to measure risk reduction and program effectiveness

🎯 Requirements

• 3–4 years of experience in Information Security, including at least 2 years in Application Security • Strong experience with Secure SDLC, threat modelling, application security reviews and secure code reviews • Hands-on experience with SAST, SCA and automated security testing integrated into CI/CD pipelines • Strong knowledge of OWASP Top 10, OWASP ASVS, API Security and secure coding best practices • Experience implementing and managing WAF solutions • Experience conducting internal penetration testing, including APIs using Burp Suite • Solid understanding of Kubernetes security, cloud-native applications and networking fundamentals (HTTP, HTTPS, TCP/IP) • Basic scripting or development experience, preferably in Python • Excellent communication skills and ability to influence technical and non-technical stakeholders

🏖️ Benefits

• Competitive pay • Meaningful benefits • Equal Opportunity Employer