Application Security Engineer - Cloud

GCS Recruitment Specialists; Ireland; On-site; EUR 50,000 - 80,000; Full time

Job summary

GCS Recruitment is seeking an Application Security Engineer to join a centralized security team in Ireland. You will manage the lifecycle of security findings, validate vulnerabilities, and collaborate with engineering teams for remediation.

The ideal candidate possesses experience in application security and penetration testing, with strong knowledge of the OWASP Top 10 and ability to read Java and JavaScript code. This role involves producing clear security assessments suitable for various audiences.

Qualifications

• Relevant experience in application security, penetration testing, bug bounty triage, or product security engineering.
• Strong knowledge of OWASP Top 10 and modern attack classes.
• Ability to read and trace JavaScript and Java codebases to identify vulnerabilities.
• Experience writing clear security reports for diverse audiences.
• Fluency in CVSS scoring and rationale behind severity decisions.

Responsibilities

• Validate vulnerabilities and recommend remediation paths.
• Assess scope and impact of vulnerabilities across web, API, and server-side components.
• Produce clear security assessments for engineering and executive levels.
• Partner with development teams on defect filing and patch validation.
• Recreate customer scenarios to verify reported vulnerabilities.
• Review code to trace attack vectors and validate security fixes.

Skills

Application security

Penetration testing

OWASP Top 10

JavaScript

Java

Clear security reporting

CVSS scoring

Job description

Application Security Engineer

You’ll join a centralised Application Security team responsible for managing the full lifecycle of security findings reported by customers, internal teams, and third‑party testers.

You’ll triage real‑world vulnerability reports, reproduce issues in controlled environments, analyse platform‑level attack surfaces, and collaborate with engineering teams to validate fixes and guide remediation.

Day to Day Responsibilities

• Validate vunerabilities, assess scope and impact, determine severity, and recommend remediation paths.
• vulnerabilities across web, API, and server‑side components and privilege escalation.
• Produce clear, accurate security assessments suitable for both engineering teams and executive level.
• Partner with development teams on defect filing, patch validation, backport decisions, and fix completeness.
• Recreate customer scenarios in lab environments to verify reported vulnerabilities and confirm remediation.
• Review server‑side and client‑side code to trace attack vectors and validate security fixes.

Desired Experience

• Relevant eperience in application security, penetration testing, bug bounty triage, or product security engineering.
• Strong working knowledge of OWASP Top 10 and modern attack classes
• Ability to read and trace JavaScript and Java codebases to identify vulnerabilities and validate fixes.
• Experience writing clear, technically accurate security reports for diverse audiences.
• Fluency in CVSS scoring, including rationale behind severity decisions.

GCS is acting as an Employment Business in relation to this vacancy.