Application Security Engineer: Cloud & OWASP Expert

The Fork; Paris; On-site; EUR 70,000 - 100,000; Full time

Benefits offered by this job

Health insurance

Lunch vouchers

Life Insurance and Disability at no成本

Calm app access

Team building events

Continuous learning and development

Job summary

TheFork, Europe’s leading restaurant booking platform, is seeking an Application Security Engineer to join the security team in Paris. You will assess security posture across applications and systems, and help shape secure software delivery.

Responsibilities include scanning web applications for vulnerabilities, guiding developers, and researching emerging threats. A 4+ year track record in manual security testing and a solid understanding of security fundamentals are required.

Qualifications

• Bachelor’s degree in a technical field, security certifications are a plus but not required.
• At least 4+ years of demonstrated manual security testing.
• Solid understanding of security protocols, cryptography, authentication, authorization, and general application security requirements.

Responsibilities

• Scan TheFork web applications for vulnerabilities and ensure fixes.
• Work knowledge of a programming language (e.g., Node/TypeScript).
• Strong IaaS security skills with a focus on AWS.
• Research new security threats, vulnerabilities, and exploit techniques.
• Respond to security threats and help implement new requirements.
• Provide technical guidance and oversight to developers.
• Collaborate in a team while maintaining confidentiality of investigations.
• Strong knowledge of OWASP concepts across solutions.

Skills

Manual security testing

OWASP concepts

Education

Bachelor's degree in Information Systems or Computer Science

Tools

AWS

Job description

TheFork, Europe’s leading restaurant booking platform, is seeking an Application Security Engineer to join the security team in Paris. You will assess security posture across applications and systems, and help shape secure software delivery.

Responsibilities include scanning web applications for vulnerabilities, guiding developers, and researching emerging threats. A 4+ year track record in manual security testing and a solid understanding of security fundamentals are required.