Senior AppSec Engineer — Hybrid, Drive Secure SDLC

SMBC; Tralee; Hybrid; EUR 90,000 - 130,000; Full time

Job summary

SMBC Group is seeking a Senior Application Security Engineer to ensure secure software delivery. You will read and explain code issues, collaborate with developers, and drive remediation across SAST, DAST, and container security.

The role involves weekly office attendance in Tralee and potential weekend shifts based on project needs. The ideal candidate has strong development background, familiarity with CI/CD, and a proven track record in applying OWASP Top 10 mitigation strategies within an

Qualifications

• 7+ years as an Application Security analyst or app pen tester.
• Experience leading remediation and security champion programs.
• Proficient in reading code and writing fixes for stakeholders.
• CI/CD pipeline improvement to improve code quality and vulnerability detection.
• 4+ years with SAST/DAST; 2+ years container security.
• Strong knowledge of OWASP Top 10 or CWE; threat modeling basics.
• Experience with Jira/Confluence; documentation discipline.

Responsibilities

• Deliver and report on State of AppSec program to leadership.
• Work with developers to ensure code is scanned and vulnerabilities tracked.
• Interface with security architecture and vulnerability management teams.
• Perform occasional manual validation of findings and fixes.

Skills

Application Security

Remediation management

Code reading

Code fixes

CI/CD security

SAST/DAST

Container security

Secure SDLC

OWASP Top 10

Threat modeling

Jira/Confluence

Penetration testing

Tools

Jira

Confluence

Job description

SMBC Group is seeking a Senior Application Security Engineer to ensure secure software delivery. You will read and explain code issues, collaborate with developers, and drive remediation across SAST, DAST, and container security.

The role involves weekly office attendance in Tralee and potential weekend shifts based on project needs. The ideal candidate has strong development background, familiarity with CI/CD, and a proven track record in applying OWASP Top 10 mitigation strategies within an