Senior Application Security Engineer

Malwarebytes; España; On-site; EUR 70,000 - 87,000; Full time

Benefits offered by this job

Comprehensive medical, dental, and vis

Employee Referral Bonus Program

Wellness programs

Comprehensive Time Off policy

Meaningful impact for self and world

Job summary

Malwarebytes is seeking a Senior Application Security Engineer focused on Windows desktop security. You will own the bug bounty program, automate security in CI/CD, and collaborate with development teams to implement secure design reviews and threat modeling.

The role spans macOS/iOS/Android support as needed and requires independent work in a security-first environment. You will lead security tooling, manage external collaborations for code reviews and pentests, and promote secure development

Qualifications

• Experience securing Windows desktop applications.
• Hands-on with bug bounty programs and security tooling.
• Strong written and verbal communication to explain security topics to technical and non-technical audiences.

Responsibilities

• Automate security processes and tooling in CI/CD with SAST, DAST, and SCA.
• Coordinate security reviews and penetration tests with external firms.
• Advise product teams on application security, threat modeling, and design reviews.
• Manage the bug bounty program and security tools for timely remediation.
• Validate reported vulnerabilities with development teams and verify fixes.
• Promote security best practices and a secure development culture.

Skills

Bug bounty program mgmt

SAST/DAST/SCA tooling

GitHub & Actions

Desktop security (Windows)

Programming: C/C++/C#/Java

Security communication

Independent work

Tools

GitHub

GitHub Actions

GitHub Advanced Security

AWS

Terraform

Job description

Malwarebytes is reimagining security to safeguard devices, data, and people - no matter their location, lifestyle, or means. What began in 2008 with one person helping another remove a malware infection has grown into a global leader in online protection, with an all-in-one suite of cybersecurity, privacy, and identity protection solutions that empower millions of people worldwide to enjoy their digital lives, free from threats and scams.

About Malwarebytes Inc.

Our portfolio has grown far beyond malware removal into a full suite of award-winning cybersecurity, privacy, and identity solutions, from the free tools that have long served as a first line of defense to newer options for identity protection and personal data removal. The threat landscape keeps getting faster, stealthier, and more sophisticated, and we believe protection should be both powerful and refreshingly simple - because security that's too hard to use doesn't get used. Built and beloved by experts, we combine world‑class threat research with proprietary, AI‑powered processes to deliver powerful digital protection that's always by your side.

Malwarebytes is looking for..

We are looking for a Senior Application Security Engineer with substantial experience securing Windows applications to join our security‑first company. As a dedicated AppSec engineer in the AppSec team, you will use modern tools to identify, triage, and resolve security issues in close partnership with development teams. You will manage the bug bounty program and focus primarily on Windows application security, while also contributing to macOS, iOS, and Android security as needed. If you thrive on learning new technologies and working independently, we want to hear from you.

What You'll Do

• Automate security processes and tooling within the CI/CD pipeline, including integrating SAST, DAST, and SCA tools to prevent classes of security issues.
• Perform and manage collaboration with external firms on security-focused code reviews and penetration tests. Triage the results and consult teams on severity and resolution.
• Support and consult with product and development teams on application security, including conducting threat modeling and design reviews.
• Administer and support the ongoing bug bounty program and security tools to ensure timely remediation of vulnerabilities. Assist the triage team and maintain effective collaboration with external researchers and the platform vendor.
• Work closely with development teams to validate reported vulnerabilities and verify that implemented fixes adequately mitigate the associated risks.
• Lead efforts to promote security best practices and foster a secure development culture across the organization.

Skills You'll Need To Have

• Proficiency managing a bug bounty program and hands‑on experience with SAST, DAST, and SCA tooling.
• Ability to use GitHub and manage relevant GitHub Actions and GitHub Advanced Security features.
• Experience in code review & security analysis of desktop applications. Advanced knowledge of securing Windows desktop applications.
• Software development skills in C, C++, C#, or Java, and experience securing cloud services, desktop, and mobile applications.
• Excellent written and verbal communication skills with the ability to articulate complex security topics clearly and concisely to technical and non-technical audiences.
• Able to adapt quickly in a growing organization and solve problems collaboratively across development teams. Willing to learn new security technologies as business needs evolve.
• Able to work independently in high-risk environments with minimal supervision, being a self-starter.

Skills That Are Nice To Have

• Red teaming experience
• Certifications in any of the following: CISSP, CEH, or GIAC Reverse Engineering.
• Hands‑on experience in AWS and managing infrastructure with Terraform.
• Advanced knowledge of macOS, iOS, and Android security.
• Thorough knowledge of digital forensics methodology.
• Strong background in security architecture, system administration, and networking.

Annual compensation:

70K-87K EUR, subject to the country, and experience and interview performance

Perks & Benefit

• Comprehensive medical, dental, and vision insurance coverage
• Employee Referral Bonus Program
• Wellness programs
• Comprehensive Time Off policy
• An opportunity to do something great for yourself and the world!

(Benefits and Perks subject to change by country/region)

Our company will not discriminate against or harass any employee or applicant for employment because of race, color, creed, religion, national origin, sex, sexual orientation, gender identity, disability, age, marital status, familial status, membership or activity in a local human rights commission, or status regarding public assistance. We will ensure that all our employment practices are free of discrimination. Such employment practices include, but are not limited to, the following: hiring, upgrading, demotion, transfer, recruitment or recruitment advertising, selection, layoff, disciplinary action, termination, rates of pay or other forms of compensation, and selection for training, including apprenticeship. We will provide reasonable accommodation to applicants and employees with disabilities whenever possible.

The Pay Range For This Role Is

70,000 - 87,000 EUR per year(Depending on the location)