Application Security Engineer

Deltatre; Bergamo; In loco; EUR 40.000 - 65.000; Tempo pieno

Descrizione del lavoro

Deltatre recherche un Ingénieur en Sécurité Applicative pour assurer la sécurité des produits logiciels dès la phase de conception jusqu'au déploiement. Dans un environnement dynamique, vous collaborerez étroitement avec les équipes de développement pour intégrer les principes de sécurité et gérer les tests, tout en participant à la culture de la sécurité au sein de l'organisation.

Servizi

25 working days per year vacation entitlement

Team events sponsored by the company

Free refreshments in the office

Private health insurance

Competenze

• Expérience prouvée en sécurité des applications et pratiques de développement sécurisé.
• Connaissance forte en revue de code de sécurité (C#, TypeScript).
• Expérience pratique avec les outils de sécurité.

Mansioni

• Exécuter des revues de code de sécurité pour identifier et atténuer les vulnérabilités.
• Travailler avec les équipes produit pour intégrer la sécurité dès la phase de conception.
• Gérer les tests de sécurité incluant SAST et DAST.

Conoscenze

Security Code Review

Threat Modeling

Secrets Management

Scripting (Python, Bash, PowerShell)

Collaboration and Communication

Formazione

Experience in application security

Strumenti

SAST

DAST

Dependency Scanning Tools

Descrizione del lavoro

As an Application Security Engineer, you will play a critical role in ensuring our software products are secure from the earliest design phases through to deployment. You will work closely with development and product teams to integrate security into every stage of the development process.

You will be part of an international team, contributing to the success of our products.

Key Responsibilities :

• Security Code Review : Conduct thorough security code reviews to identify and mitigate vulnerabilities.
• Collaborative Design : Partner with product and engineering teams to embed secure architecture principles early in the design phase.
• Threat Modeling & Secrets Management : Lead threat modeling exercises, manage secrets, and define secure authentication and authorization flows.
• Security Testing : Oversee SAST, DAST, and dependency scanning; manage feedback loops with developers for timely remediation.
• Penetration Testing : Support external penetration testing efforts and assist with remediation planning and tracking.
• Security Culture : Act as a partner to development teams, fostering a security-first culture through continuous support and enablement.

Requirements

Qualifications :

• Proven experience in application security and secure software development practices.
• Strong knowledge of security code review (C#, TypeScript), threat modeling, and secrets management.
• Proficiency in scripting languages such as Python, Bash, or PowerShell for automation of security tasks.
• Hands-on experience with SAST, DAST, and dependency scanning tools.
• Excellent collaboration and communication skills.
• Ability to work effectively in a fast-paced, dynamic environment.

Preferred Skills :

• Participation in Capture The Flag (CTF) competitions, demonstrating practical problem-solving skills in cybersecurity scenarios.
• Experience as a speaker at cybersecurity conferences, showcasing expertise and contributing to the security community.

Our Culture

Our people are the key to our success. We pride ourselves on offering a dynamic, creative, innovative, and supportive environment. A ‘can-do’ attitude, strong work ethic, integrity, friendliness, and attention to detail are essential attributes we value highly.

Even if you don't tick every box, if you're passionate about what we do, we encourage you to send us your details. We may find a perfect match during the interview process.

Our environment is inclusive and supportive, valuing diversity and fostering a culture where everyone can bring their whole selves to work. We are committed to equal opportunities and welcome applicants from all backgrounds.

Some of our Company perks :

• Global company with huge growth potential
• 25 working days per year vacation entitlement
• 5 Sick Days per calendar year
• Team events sponsored by the company
• Free refreshments in the office
• Private health insurance

We are committed to ensuring that we provide equal opportunities for all. Please let us know if you need us to make any adjustments or if you have any special requirements for the interview process.

J-18808-Ljbffr