Application Security Engineer

TheFork; Piemonte; On-site; EUR 67,000 - 73,000; Full time

Benefits offered by this job

Health insurance

Lunch vouchers

Life Insurance

Disability insurance

Team building events

Continuous learning and development

Job summary

TheFork, a leading restaurant booking platform in Europe, is seeking an Application Security Engineer to strengthen the security of its web applications and systems. You will evaluate security posture, work with developers, and help implement robust security requirements in a fast-paced, multinational team.

Join a diverse, people-first culture under Tripadvisor Group with competitive pay and benefits. The role is based in Piemonte, Italy, with opportunities for growth and ongoing learning.

Qualifications

• Bachelor’s degree in a technical field is required.
• Security certifications are desirable but not required (CISSP, GIAC, CEH, Security+).
• Minimum 4+ years of demonstrated manual security testing.
• Solid understanding of security protocols, cryptography, authentication and authorization.
• Experience in hybrid cloud environments, such as AWS.
• Strong IT operations and service support knowledge.

Responsibilities

• Scan TheFork web applications for vulnerabilities and verify fixes.
• Work with Node/Typescript in an OO language environment.
• Leverage IaaS security skills focusing on AWS cloud technologies.
• Research new security threats, vulnerabilities and exploit techniques.
• Respond to threats and implement new security requirements.
• Provide technical guidance to developers and teams.
• Maintain confidentiality of investigation information.
• Apply OWASP concepts across solutions.

Skills

Manual security testing

OWASP knowledge

Security protocols

Cryptography

Authentication

Authorization

Education

Bachelor's Degree in Information Systems or Computer Science

Tools

AWS

Job description

Join our Movement and Champion Restaurant Culture! At TheFork we believe that the best things in life happen around the table.

As the leading restaurant booking platform in Europe, we connect the broadest community of loyal diners with the world’s favorite restaurants. Powered by innovation and a deep passion for the restaurant industry, we create unique dining experiences across 11 countries.

We’re part of the Tripadvisor Group and proud to be building a diverse, people-first culture where “respect”, “ownership”, “growth” and “better together” values thrive.

If you’re passionate about food, technology, and making a real impact, your seat at the table is ready.

This position offers a gross TTC annual salary range of 67 000€ and 73 000€, in line with the collective bargaining agreement and the company compensation philosophy. The final offer will reflect the candidate’s experience, qualifications and the specific responsibilities of the role.

What You Will Do

Are you passionate about securing the application development pipelines and ensuring the security of web applications? Are you looking to thrive in a fast-paced environment? If so, TheFork is looking to hire an Application Security Engineer for our ever-growing security team. In this role, you will evaluate the security posture of TheFork’s applications and systems.

Main Activities

• Scanning TheFork web applications looking for vulnerabilities and ensuring they get fixed
• Working knowledge of any object-oriented programming language (eg. Node / Typescript)
• Strong IaaS security skills, with a focus on cloud technologies like AWS.
• Researching new security threats, vulnerabilities, and exploit techniques
• Responding to new security threats and helping implement new requirements
• Provides technical guidance and oversight when working with developers
• Work in a team environment while maintaining the confidentiality of investigation information
• Strong knowledge of working with OWASP concepts for various solutions

Who You Are

• Bachelor's Degree, preferably in a technical field i.e. Information Systems or Computer Science.
• Security certifications are desired but not required (CISSP, GIAC, CEH, Security+, CSSLP).
• At least 4+ years of demonstrated manual security testing
• You must have a solid understanding of security protocols, cryptography, authentication, authorization, and general application security requirements
• Experience implementing and operating security technologies and processes in a hybrid cloud environment, such as AWS.
• Strong understanding of IT operations and service support processes

What We Offer You

• An awesome team (not everybody like our jokes, but we try our best)
• A Permanent contract (that can be useful in life)
• Competitive fixed salary & bonus
• Lunch vouchers available for each working day (because yes, we like to try our best restaurants)
• International teams - More than 30 nationalities and 16 offices worldwide
• Highly inclusive working environment
• Lifestyle benefits that can be used to reimburse physical, leisure activities, family support, travel etc
• Continuous learning and development programs
• Health insurance
• Free access to the Calm app
• Life Insurance and Disability at no cost to the employee
• Team building events

We believe that we are better together, and we welcome you for who you are. We endeavor to ensure that everyone - regardless of ability, age, socio-economic & cultural background, ethnicity, faith, gender, gender expression, gender identity, ideology, national origin, race, sexual orientation, marital status, or any characteristic protected under applicable law -has the opportunity to reach their full potential. At TheFork, we want you to bring us your unique perspectives and experiences, so we can collectively continue disrupting the restaurant industry and go from good to great.

TheFork is committed to a fair recruitment process. If you have special needs and require reasonable support during your application, interview, or participation in the selection process due to health conditions or disability, please direct your inquiries to [e-mail]. Our HR team will review the request and respond accordingly

All hiring happens through our careers site and official email. We do not text or ask for payment during the hiring process. Please report any suspicious messages immediately.