Application Security Engineer

🔥 1 hour ago

Apply Now

Find Similar Remote Jobs

Receive Emails For Remote Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Wrike

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2006

☁️ SaaS

⚡ Productivity

🏢 Enterprise

💰 $15M Series B on 2015-05

SaaS • Productivity • Enterprise

Wrike is a leading work management platform that streamlines workflows and enhances collaboration for businesses worldwide. Recognized as a Leader in the 2024 Gartner Magic Quadrant for Collaborative Work Management, Wrike offers solutions for diverse teams such as marketing, creative, product, client services, IT, operations, HR, legal, finance, and more. The platform provides a range of features including AI-powered automation, analytics, Gantt charts, Kanban boards, and customizable dashboards to maximize productivity and efficiency. Trusted by over 20,000 organizations globally, Wrike helps teams align strategy with execution, improve visibility, and manage resources efficiently. It supports integration with over 400 popular apps and ensures robust security, making it an ideal choice for enterprise-level implementation as well as for smaller teams looking to enhance their project and workflow management capabilities.

📋 Description

• Own recurring Application Security activities for multiple product teams, including secure design reviews, threat modeling, code review, testing validation, and remediation guidance. • Assess vulnerabilities and findings from scanners, testing, bug reports, and internal reviews; distinguish meaningful risk from noise and help teams focus on the most important issues. • Validate security fixes and recommend compensating controls or practical alternatives when ideal remediation is not immediately possible. • Improve day-to-day AppSec workflows by tuning checks, refining rules, improving triage quality, and integrating security more effectively into developer workflows and CI/CD pipelines. • Help engineers understand security findings in practical product terms by providing clear prioritization and actionable remediation guidance. • Contribute to secure-by-default development practices by reinforcing standards, reference patterns, and review expectations. • Use structured AI workflows to support complex AppSec analysis, such as broader codebase review, design decomposition, review preparation, and documentation synthesis, while maintaining clear guardrails around prompt and context hygiene, human oversight, and output quality.

🎯 Requirements

• Strong hands-on knowledge of common web and API security issues, authentication and session management concepts, secrets handling, and secure coding fundamentals. • Proven experience conducting secure code reviews in modern engineering environments, especially in Java, TypeScript, and PHP, with the ability to clearly explain security flaws and collaborate on effective remediation. • Experience leading or facilitating routine threat modeling for product features or services and translating outcomes into actionable security requirements. • Experience managing Application Security tools such as SAST, SCA, DAST, and secrets scanning solutions, as well as bug bounty platforms, with a focus on CI/CD integration, false positive reduction, and signal quality improvement. • Working knowledge of OAuth/OIDC, service-to-service authentication, secrets management, and foundational cloud or container security concepts. • Ability to prioritize findings based on exploitability, exposure, business impact, and remediation effort rather than relying on severity labels alone. • Strong written and verbal communication skills, with the ability to work effectively with engineers, technical leads, and product stakeholders. • Sound judgment when using AI-assisted workflows, treating AI as a copilot rather than an authority and validating correctness, exploitability, and business context before taking action.

🏖️ Benefits

• 28 calendar days of paid vacation • Sick Leave Compensation (5 Paid Uncertified Sick Days) • Parental Leave: 18 Weeks Maternity / 4 Week Paternity • 2 Volunteer Days • Health Insurance (Employees + Dependents) • Life Insurance Plan • Utility Allowance (30 EUR/month, subject to taxation) • Fitness Plan (800 EUR/year) • Full-remote & On-demand access to Co-working space