Senior App Security Engineer — Fully Remote, High-Impact

Jobgether; France; Remote; EUR 157,000 - 214,000; Full time

Benefits offered by this job

Fully remote work

Executive-level security support

Hands-on tooling & automation

Job summary

Jobgether seeks a Staff Application Security Engineer in France to lead the security program for applications and cloud systems. You will combine security expertise with software engineering to build secure workflows, tooling, and secure defaults across APIs, SDKs, and data pipelines.

You will design secure development practices, perform threat modeling, drive remediation, and mentor teams while integrating AI-powered testing and evidence-based controls.

Qualifications

• 8+ years in software or security engineering with 5+ years in app security.
• Hands-on implementation of security programs within a product engineering org.
• Proficient in TS/JS/Go/Python or equivalent languages.
• Deep expertise in OWASP Top 10, API security, and auth design.

Responsibilities

• Design and implement secure SDLC with threat modeling and secure reviews.
• Own and improve SAST/DAST, SCA, secrets detection, and container scanning.
• Integrate tools into CI/CD; reduce false positives and assign remediation SLAs.
• Lead AI-first security engineering for automated remediation and testing.
• Build secure patterns and libraries for authentication, authorization, and crypto.
• Contribute to production code with security fixes and automation.
• Lead threat modeling and architecture reviews for APIs, SDKs, dashboards, data pipelines.
• Manage vulnerability triage, severity, remediation tracking, and follow-ups.

Skills

Threat modeling

Secure SDLC

CI/CD integration

SAST/DAST

SCA

Vulnerability triage

Code reviews

AI-assisted testing

Secrets management

APIs security

Cloud security

Secure defaults

Security tooling

Tools

Snyk

Wiz

Cloudflare

Okta

Job description

Jobgether seeks a Staff Application Security Engineer in France to lead the security program for applications and cloud systems. You will combine security expertise with software engineering to build secure workflows, tooling, and secure defaults across APIs, SDKs, and data pipelines.

You will design secure development practices, perform threat modeling, drive remediation, and mentor teams while integrating AI-powered testing and evidence-based controls.