AppSec Engineer — Remote, AI-Driven Security

Camunda; St. Pölten; Remote; EUR 108,000 - 175,000; Full time

Benefits offered by this job

Remote & flexible work

Annual kickoff events

Health & wellbeing benefits

Learning budget

Job summary

Camunda is seeking an Information Security Engineer with a focus on Application Security to join our Information Security team. We value a transparent, collaborative approach and aim to move security from gatekeeping to enabling engineers to ship securely.

You will triage vulnerabilities, perform threat modeling, review code with AI-assisted tooling, and build internal security tooling. This role supports audits and customer inquiries while working in a remote, global setting.

Qualifications

• 3+ years in security or software engineering
• Experience with SaaS products and CI/CD pipelines
• Hands-on vulnerability triage with static/dynamic analysis tools
• Threat modeling (STRIDE) on real systems
• Ability to read Java and write scripts/tools
• Experience using AI coding agents in daily work
• Clear, friendly communication with engineers

Responsibilities

• Triage findings from SCA, container and code scans and external reports
• Run threat modeling and design reviews with R&D teams
• Review code with AI-assisted tooling and validate findings
• Build internal security tooling and automations
• Explain risk to non-security stakeholders and guide secure-by-default practices
• Participate in on-call rotations and incident response
• Support audits and write customer security advisories

Skills

Vulnerability triage

Threat modeling

LLM-assisted code review

Security tooling

On-call response

Clear communication

Tools

Snyk

Trivy

Semgrep

CodeQL

Job description

Camunda is seeking an Information Security Engineer with a focus on Application Security to join our Information Security team. We value a transparent, collaborative approach and aim to move security from gatekeeping to enabling engineers to ship securely.

You will triage vulnerabilities, perform threat modeling, review code with AI-assisted tooling, and build internal security tooling. This role supports audits and customer inquiries while working in a remote, global setting.