Information Security Engineer - Application Security

Camunda; Connacht; A distancia; EUR 90.000 - 120.000; Jornada completa

Descripción de la vacante

Camunda is hiring an Information Security Engineer specializing in Application Security to join our Information Security team. You’ll collaborate with R&D engineers to review designs, model threats, and triage vulnerabilities, while helping build internal tools and CVE tooling.

As an AI-first company, Camunda integrates security reviews with AI-assisted workflows, and you will contribute to on-call incident response, audits, and security advisories for customers.

Formación

• Around 3+ years in security or software engineering, with at least 2 on application or product security.
• Experience at a SaaS or software product company, collaborating with engineering teams
• Hands-on security experience across code, design reviews, and tooling.

Responsabilidades

• Triage findings from SCA, container and code scanning, external reports and internal testing.
• Run threat modeling sessions and design reviews with R&D teams.
• Review code and use LLM-assisted tooling to validate findings.
• Build and maintain internal security tooling and CVE registry automation.
• Assist engineers with secure-by-default guidance and conduct on-call rotation.

Conocimientos

AppSec

Threat modeling

Code review

Incident response

CI/CD security

SaaS security

Descripción del empleo

Camunda is the enterprise platform for agentic orchestration, enabling organizations to coordinate AI agents, people, and systems across complex, end-to-end business processes. With built-in governance, auditability, and human oversight, Camunda gives enterprises the control they need to move AI from pilots to production - safely and at scale. Trusted by over 700 organizations worldwide, including 9 of top 10 US banks, Camunda helps enterprises boost operational efficiency, accelerate time-to-value, and deliver better customer experiences.

Fully remote and global, we are in the middle of something bigger: transforming into an AI-first organisation, built on our own platform. We use Agentic AI to automate, orchestrate intelligent processes, and elevate human contribution across every team.

Named GP Bullhound’s Top 100 Next Unicorn list, 2025 Great Place to Work certified. Visionary in 2025 Gartner® Magic Quadrant™ for Business Orchestration and Automation Technologies. 3rd in Flexa's 2026 Most Flexible Companies, We’re growing fast and looking for top talent to join our team. If you want meaningful work, visible impact and put something genuinely rare on your CV, keep reading.

About The Role

Hi there! We're hiring an Information Security Engineer with a focus on Application Security to join our Information Security team at Camunda.

We are a team that takes security seriously without making it feel like a locked door. We work in a transparent, straightforward way, and we care about doing the work right rather than just checking a compliance box.

You will work side by side with our R&D engineers: reviewing designs, threat modeling new features, digging into code and helping teams make good, risk-based decisions about the vulnerabilities that come in. You'll also help build the internal tools that make this work scale, including our CVE registry and the LLM‑assisted workflows we use to analyse code and triage findings.

Camunda is an AI-first company, and InfoSec is no exception: AI agents are part of how we review code, assess vulnerabilities, and build our tools. You will help shape how that works.

This is a hands-on role for someone who already has solid AppSec foundations and wants to grow. We are a generalist team, so you will also take part in our on-call rotation and incident response, and get exposure to other areas of security. But most of your time will be spent with engineers and building and maintaining internal tools and processes.

What You Will Do

• Vulnerability management: triage findings from SCA, container and code scanning, external reports and internal security testing; assess whether Camunda is actually affected; agree fix / mitigate / accept with engineering and follow through to release.
• Threat modeling and security reviews: run threat modeling sessions and design reviews with R&D teams for new features and architecture changes, and turn the results into concrete, prioritised actions.
• Code analysis with LLMs: use and improve LLM‑assisted tooling (agents, prompts, reusable skills) to review code, validate findings and reproduce issues, while applying your own judgement to know when the model is wrong.
• Build internal security tooling: contribute to the CVE registry and related automation that connects scanners, engineering teams, and customer communication. Much of it is built on Camunda itself.
• Help engineers do the secure thing by default: answer questions, review pull requests, improve guidelines and occasionally run a session or workshop.
• On-call and incident response: share the InfoSec on-call rotation with the other engineers and help investigate and resolve security incidents.
• Support the wider team: help write security advisories for our customers, answer customer security questions and support audits.

What You Will Bring To The Role

• Around 3+ years in security or software engineering, with at least 2 of them working on application or product security (AppSec, product security, pentesting, or a security‑focused developer role all count).
• Experience at a SaaS or software product company, working closely with engineering teams that ship often through modern CI/CD and cloud environments.
• Hands‑on