Cloud Application Security Engineer

GCS Recruitment; Ireland; On-site; EUR 50,000 - 80,000; Full time

Job summary

GCS Recruitment is seeking an Application Security Engineer to join a centralized security team in Ireland. You will manage the lifecycle of security findings, validate vulnerabilities, and collaborate with engineering teams for remediation.

The ideal candidate possesses experience in application security and penetration testing, with strong knowledge of the OWASP Top 10 and ability to read Java and JavaScript code. This role involves producing clear security assessments suitable for various audiences.

Qualifications

• Relevant experience in application security, penetration testing, bug bounty triage, or product security engineering.
• Strong knowledge of OWASP Top 10 and modern attack classes.
• Ability to read and trace JavaScript and Java codebases to identify vulnerabilities.
• Experience writing clear security reports for diverse audiences.
• Fluency in CVSS scoring and rationale behind severity decisions.

Responsibilities

• Validate vulnerabilities and recommend remediation paths.
• Assess scope and impact of vulnerabilities across web, API, and server-side components.
• Produce clear security assessments for engineering and executive levels.
• Partner with development teams on defect filing and patch validation.
• Recreate customer scenarios to verify reported vulnerabilities.
• Review code to trace attack vectors and validate security fixes.

Skills

Application security

Penetration testing

OWASP Top 10

JavaScript

Java

Clear security reporting

CVSS scoring

Job description

GCS Recruitment is seeking an Application Security Engineer to join a centralized security team in Ireland. You will manage the lifecycle of security findings, validate vulnerabilities, and collaborate with engineering teams for remediation.

The ideal candidate possesses experience in application security and penetration testing, with strong knowledge of the OWASP Top 10 and ability to read Java and JavaScript code. This role involves producing clear security assessments suitable for various audiences.