Remote Application Security Engineer

Whatnot; Dublin; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Flexible time off

Health insurance

WFH support

Home office setup

Phone + internet allowance

Wellness allowance

Childcare allowance

Family planning benefits

International retirement plans

Job summary

Whatnot is seeking an Application Security Engineer to protect our products across web and mobile platforms. You will collaborate with product and engineering teams to identify risks, perform security reviews, and implement secure coding practices.

Ideal candidates have 5+ years of relevant experience, strong skills in Python/Elixir/JavaScript, and the ability to reproduce and triage vulnerabilities. Remote-friendly, with Dublin hub proximity strongly preferred.

Qualifications

• Minimum 5 years of relevant security experience.
• Proficient in Python/Elixir/JavaScript with secure coding practices.
• Experience reviewing code for security vulnerabilities.
• Strong knowledge of threat modelling and security assessments.
• Ability to investigate and triage security issues in web and mobile apps.
• Excellent communication and collaboration with product/engineering teams.

Responsibilities

• Perform security-focused code reviews and propose practical fixes.
• Partner with product and engineering on threat modelling and security reviews.
• Help reproduce, triage, and address vulnerabilities in web/mobile apps.
• Support bug bounty investigations and remediation efforts.
• Help develop security patterns, processes, and automated tooling.

Skills

Python

Elixir

JavaScript

Code review

Threat modelling

Security reviews

Cross-functional collaboration

Effective communication

Job description

Whatnot is seeking an Application Security Engineer to protect our products across web and mobile platforms. You will collaborate with product and engineering teams to identify risks, perform security reviews, and implement secure coding practices.

Ideal candidates have 5+ years of relevant experience, strong skills in Python/Elixir/JavaScript, and the ability to reproduce and triage vulnerabilities. Remote-friendly, with Dublin hub proximity strongly preferred.