Application Security Engineer

Deltatre; Ancona; In loco; EUR 40.000 - 70.000; Tempo pieno

Descrizione del lavoro

A leading company in the tech sector is seeking an Application Security Engineer to ensure the security of their software. You will work closely with development teams, conduct security audits, and foster a culture of security across the organization. The ideal candidate will have strong knowledge in application security practices and scripting skills, with good collaboration abilities.

Servizi

Global company with huge growth potential

25 working days per year vacation entitlement

5 Sick Days per calendar year

Team events sponsored by the company

Free refreshments in the office

Private health insurance

Competenze

• Proven experience in application security and secure software development practices.
• Strong knowledge of security code review (C#, TypeScript).
• Excellent collaboration and communication skills.

Mansioni

• Conduct thorough security code reviews to identify and mitigate vulnerabilities.
• Partner with product and engineering teams to embed secure architecture principles.
• Oversee SAST, DAST, and dependency scanning.

Conoscenze

Application Security

Security Code Review

Threat Modeling

Secrets Management

Scripting (Python, Bash, PowerShell)

Collaboration

Communication

Security Testing

Penetration Testing

Strumenti

SAST Tools

DAST Tools

Dependency Scanning Tools

Descrizione del lavoro

As an Application Security Engineer, you will play a critical role in ensuring our software products are secure from the earliest design phases through to deployment. You will work closely with development and product teams to integrate security into every stage of the development process.

You will be part of an international team, contributing to the success of our products.

Key Responsibilities :

• Security Code Review: Conduct thorough security code reviews to identify and mitigate vulnerabilities.
• Collaborative Design: Partner with product and engineering teams to embed secure architecture principles early in the design phase.
• Threat Modeling & Secrets Management: Lead threat modeling exercises, manage secrets, and define secure authentication and authorization flows.
• Security Testing: Oversee SAST, DAST, and dependency scanning; manage feedback loops with developers for timely remediation.
• Penetration Testing: Support external penetration testing efforts and assist with remediation planning and tracking.
• Security Culture: Act as a partner to development teams, fostering a security-first culture through continuous support and enablement.

Requirements

• Proven experience in application security and secure software development practices.
• Strong knowledge of security code review (C#, TypeScript), threat modeling, and secrets management.
• Proficiency in scripting languages such as Python, Bash, or PowerShell for automation of security tasks.
• Hands-on experience with SAST, DAST, and dependency scanning tools.
• Excellent collaboration and communication skills.
• Ability to work effectively in a fast-paced, dynamic environment.

Preferred Skills :

• Participation in Capture The Flag (CTF) competitions, demonstrating practical problem-solving skills in cybersecurity scenarios.
• Experience as a speaker at cybersecurity conferences, showcasing expertise and contributing to the security community.

Our Culture

Our people are the key to our success. We pride ourselves on offering a dynamic, creative, innovative, and supportive environment. A ‘can-do’ attitude, strong work ethic, integrity, friendliness, and attention to detail are essential attributes we value highly.

Even if you don't tick every box, if you're passionate about what we do, we encourage you to send us your details. We may find a perfect match during the interview process.

Our environment is inclusive and supportive, valuing diversity and fostering a culture where everyone can bring their whole selves to work. We are committed to equal opportunities and welcome applicants from all backgrounds.

Some of our Company perks :

• Global company with huge growth potential
• 25 working days per year vacation entitlement
• 5 Sick Days per calendar year
• Team events sponsored by the company
• Free refreshments in the office
• Private health insurance

We are committed to ensuring that we provide equal opportunities for all. Please let us know if you need us to make any adjustments or if you have any special requirements for the interview process.

J-18808-Ljbffr