Application Security Engineer

Deltatre; Asti; In loco; EUR 40.000 - 70.000; Tempo pieno

Descrizione del lavoro

A leading technology firm is looking for an Application Security Engineer to enhance the security of their software products. This role involves close collaboration with development teams to integrate security measures from initial design to deployment. You will conduct security assessments, threat modeling, and ensure adherence to secure coding practices. Join a dynamic and inclusive environment committed to innovation and professional growth.

Servizi

25 working days per year vacation entitlement

5 Sick Days per calendar year

Team events sponsored by the company

Free refreshments in the office

Private health insurance

Competenze

• Proven experience in application security and secure software development practices.
• Strong knowledge of security code review (C#, TypeScript).
• Hands-on experience with SAST, DAST, and dependency scanning tools.

Mansioni

• Conduct thorough security code reviews to identify vulnerabilities.
• Lead threat modeling exercises and manage secrets.
• Oversee SAST, DAST, and dependency scanning.

Conoscenze

Application Security

Security Code Review

Scripting (Python, Bash, PowerShell)

Threat Modeling

Collaboration

Strumenti

SAST

DAST

Security Scanning Tools

Descrizione del lavoro

As an Application Security Engineer, you will play a critical role in ensuring our software products are secure from the earliest design phases through to deployment. You will work closely with development and product teams to integrate security into every stage of the development process.

You will be part of an international team, contributing to the success of our products.

Key Responsibilities :

• Security Code Review: Conduct thorough security code reviews to identify and mitigate vulnerabilities.
• Collaborative Design: Partner with product and engineering teams to embed secure architecture principles early in the design phase.
• Threat Modeling & Secrets Management: Lead threat modeling exercises, manage secrets, and define secure authentication and authorization flows.
• Security Testing: Oversee SAST, DAST, and dependency scanning; manage feedback loops with developers for timely remediation.
• Penetration Testing: Support external penetration testing efforts and assist with remediation planning and tracking.
• Security Culture: Act as a partner to development teams, fostering a security-first culture through continuous support and enablement.

Requirements

• Proven experience in application security and secure software development practices.
• Strong knowledge of security code review (C#, TypeScript), threat modeling, and secrets management.
• Proficiency in scripting languages such as Python, Bash, or PowerShell for automation of security tasks.
• Hands-on experience with SAST, DAST, and dependency scanning tools.
• Excellent collaboration and communication skills.
• Ability to work effectively in a fast-paced, dynamic environment.

Preferred Skills :

• Participation in Capture The Flag (CTF) competitions, demonstrating practical problem-solving skills in cybersecurity scenarios.
• Experience as a speaker at cybersecurity conferences, showcasing expertise and contributing to the security community.

Our Culture

Our people are the key to our success. We pride ourselves on offering a dynamic, creative, innovative, and supportive environment. A ‘can-do’ attitude, strong work ethic, integrity, friendliness, and attention to detail are essential attributes we value highly.

Even if you don't tick every box, if you're passionate about what we do, we encourage you to send us your details. We may find a perfect match during the interview process.

Our environment is inclusive and supportive, valuing diversity and fostering a culture where everyone can bring their whole selves to work. We are committed to equal opportunities and welcome applicants from all backgrounds.

Some of our Company perks :

• Global company with huge growth potential
• 25 working days per year vacation entitlement
• 5 Sick Days per calendar year
• Team events sponsored by the company
• Free refreshments in the office
• Private health insurance

We are committed to ensuring that we provide equal opportunities for all. Please let us know if you need us to make any adjustments or if you have any special requirements for the interview process.

J-18808-Ljbffr