Founding Application Security Engineer - Equity Options

Transak Inc.; Österreich; Remote; EUR 110.000 - 160.000; Vollzeit

Benefits dieser Stelle

Equity options

International team

Zusammenfassung

Transak Inc. is seeking its first dedicated application security lead to safeguard our software and development lifecycle across web, APIs and mobile apps. You will embed security from design through deployment, build automation, and manage the external testing program.

You will build secure coding standards, champion security throughout engineering teams, and establish a scalable security capability for MiCA, DORA, and ISO 27001 compliance.

Qualifikationen

• 5+ years in security engineering focused on application or product security.
• Deep understanding of web and API security including OWASP Top 10.
• Hands-on with security testing tools like Burp Suite, OWASP ZAP, Snyk, Aikido.
• Strong programming skills in JavaScript/Node.js or Python.
• Experience integrating security tooling into CI/CD pipelines (GitLab CI, Jenkins, GitHub Actions).
• SBOM, supply chain security, and knowledge of modern software provenance.
• Vulnerability management ownership with clear processes and SLAs.
• Threat modelling applied to real business flows and secure API architectures.
• Knowledge of cryptography, secrets management, and IAM.
• Excellent communication to translate security to engineers.

Aufgaben

• Embed security into the software development lifecycle from design to deployment.
• Conduct security code reviews, threat modelling, and architecture reviews for flows moving funds and identity data.
• Select, implement, and tune SAST, DAST, and SCA tools to catch vulnerabilities early.
• Automate application security testing within CI/CD with severity-based gating.
• Own the software supply chain with SBOMs and approved base images.
• Maintain a consolidated vulnerability register and drive remediation to closure.
• Perform penetration testing and vulnerability assessments of web apps, APIs and mobile apps.
• Own external penetration testing engagements and enforce retesting.
• Develop secure coding standards and reusable security components for engineers.
• Create a security champions programme to scale security across teams.
• Run the bug bounty programme and coordinate with external researchers.
• Research emerging threats and integrate defenses into the security architecture.
• Evidence secure development and vulnerability management for DORA, MiCA, SOC 2, ISO 27001.

Kenntnisse

Security engineering

Web & API security

Threat modelling

Secure coding basics

CI/CD tooling

SBOM / supply chain

Cryptography basics

Communication

Architectural reviews

Tools

Burp Suite

OWASP ZAP

Snyk

Aikido

Jobbeschreibung

Transak Inc. is seeking its first dedicated application security lead to safeguard our software and development lifecycle across web, APIs and mobile apps. You will embed security from design through deployment, build automation, and manage the external testing program.

You will build secure coding standards, champion security throughout engineering teams, and establish a scalable security capability for MiCA, DORA, and ISO 27001 compliance.