Application Security Engineer

Deltatre; Cremona; In loco; EUR 45.000 - 65.000; Tempo pieno

Descrizione del lavoro

Deltatre is seeking an Application Security Engineer to ensure the security of software products. The role involves security code reviews, threat modeling, and collaboration with development teams. A dynamic environment is fostered, valuing creativity and teamwork. Benefits include 25 days of vacation and private health insurance.

Servizi

25 working days per year vacation entitlement

5 Sick Days per calendar year

Team events sponsored by the company

Free refreshments in the office

Private health insurance

Competenze

• Proven experience in application security and secure software development practices.
• Strong knowledge of security code review (C#, TypeScript) and scripting languages such as Python.
• Hands-on experience with SAST and DAST tools.

Mansioni

• Conduct thorough security code reviews to identify and mitigate vulnerabilities.
• Lead threat modeling exercises and manage secrets.
• Oversee security testing efforts and support external penetration testing.

Conoscenze

Application Security

Security Code Review

Threat Modeling

Secrets Management

Scripting Languages

Collaboration

Communication

Strumenti

SAST

DAST

Dependency Scanning Tools

Descrizione del lavoro

As an Application Security Engineer, you will play a critical role in ensuring our software products are secure from the earliest design phases through to deployment. You will work closely with development and product teams to integrate security into every stage of the development process.

You will be part of an international team, contributing to the success of our products.

Key Responsibilities :

• Security Code Review : Conduct thorough security code reviews to identify and mitigate vulnerabilities.
• Collaborative Design : Partner with product and engineering teams to embed secure architecture principles early in the design phase.
• Threat Modeling & Secrets Management : Lead threat modeling exercises, manage secrets, and define secure authentication and authorization flows.
• Security Testing : Oversee SAST, DAST, and dependency scanning; manage feedback loops with developers for timely remediation.
• Penetration Testing : Support external penetration testing efforts and assist with remediation planning and tracking.
• Security Culture : Act as a partner to development teams, fostering a security-first culture through continuous support and enablement.

Requirements

Qualifications :

• Proven experience in application security and secure software development practices.
• Strong knowledge of security code review (C#, TypeScript), threat modeling, and secrets management.
• Proficiency in scripting languages such as Python, Bash, or PowerShell for automation of security tasks.
• Hands-on experience with SAST, DAST, and dependency scanning tools.
• Excellent collaboration and communication skills.
• Ability to work effectively in a fast-paced, dynamic environment.

Preferred Skills :

• Participation in Capture The Flag (CTF) competitions, demonstrating practical problem-solving skills in cybersecurity scenarios.
• Experience as a speaker at cybersecurity conferences, showcasing expertise and contributing to the security community.

Our Culture

Our people are the key to our success. We pride ourselves on offering a dynamic, creative, innovative, and supportive environment. A ‘can-do’ attitude, strong work ethic, integrity, friendliness, and attention to detail are essential attributes we value highly.

Even if you don't tick every box, if you're passionate about what we do, we encourage you to send us your details. We may find a perfect match during the interview process.

Our environment is inclusive and supportive, valuing diversity and fostering a culture where everyone can bring their whole selves to work. We are committed to equal opportunities and welcome applicants from all backgrounds.

Some of our Company perks :

• Global company with huge growth potential
• 25 working days per year vacation entitlement
• 5 Sick Days per calendar year
• Team events sponsored by the company
• Free refreshments in the office
• Private health insurance

We are committed to ensuring that we provide equal opportunities for all. Please let us know if you need us to make any adjustments or if you have any special requirements for the interview process.

J-18808-Ljbffr