Application Security Engineer

Deltatre; Teramo; In loco; EUR 50.000 - 70.000; Tempo pieno

Descrizione del lavoro

A leading technology company is seeking an Application Security Engineer to ensure the security of their software products from design to deployment. You will actively integrate security practices with development teams, conduct security code reviews, and promote a culture of security within the organization. The ideal candidate will have experience in application security, strong coding skills, and the ability to collaborate effectively within a fast-paced team environment.

Servizi

Global company with growth potential

25 vacation days per year

5 sick days per year

Team events sponsored by the company

Free refreshments in the office

Private health insurance

Competenze

• Proven experience in application security and secure software development practices.
• Strong knowledge of security code review (C#, TypeScript).
• Proficiency in scripting languages such as Python, Bash, or PowerShell.

Mansioni

• Conduct thorough security code reviews to identify and mitigate vulnerabilities.
• Partner with product and engineering teams to embed secure architecture principles.
• Lead threat modeling exercises and manage secrets.

Conoscenze

Application Security

Security Code Review

Threat Modeling

Secrets Management

Collaboration

Strumenti

SAST

DAST

Dependency Scanning Tools

Python

Bash

PowerShell

Descrizione del lavoro

As an Application Security Engineer, you will play a critical role in ensuring our software products are secure from the earliest design phases through to deployment. You will work closely with development and product teams to integrate security into every stage of the development process.

You will be part of an international team, contributing to the success of our products.

Key Responsibilities :

• Security Code Review : Conduct thorough security code reviews to identify and mitigate vulnerabilities.
• Collaborative Design : Partner with product and engineering teams to embed secure architecture principles early in the design phase.
• Threat Modeling & Secrets Management : Lead threat modeling exercises, manage secrets, and define secure authentication and authorization flows.
• Security Testing : Oversee SAST, DAST, and dependency scanning; manage feedback loops with developers for timely remediation.
• Penetration Testing : Support external penetration testing efforts and assist with remediation planning and tracking.
• Security Culture : Act as a partner to development teams, fostering a security-first culture through continuous support and enablement.

Requirements

Qualifications :

• Proven experience in application security and secure software development practices.
• Strong knowledge of security code review (C#, TypeScript), threat modeling, and secrets management.
• Proficiency in scripting languages such as Python, Bash, or PowerShell for automation of security tasks.
• Hands-on experience with SAST, DAST, and dependency scanning tools.
• Excellent collaboration and communication skills.
• Ability to work effectively in a fast-paced, dynamic environment.

Preferred Skills :

• Participation in Capture The Flag (CTF) competitions, demonstrating practical problem-solving skills in cybersecurity scenarios.
• Experience as a speaker at cybersecurity conferences, showcasing expertise and contributing to the security community.

Our Culture

Our people are the key to our success. We pride ourselves on offering a dynamic, creative, innovative, and supportive environment. A ‘can-do’ attitude, strong work ethic, integrity, friendliness, and attention to detail are essential attributes we value highly.

Even if you don't tick every box, if you're passionate about what we do, we encourage you to send us your details. We may find a perfect match during the interview process.

Our environment is inclusive and supportive, valuing diversity and fostering a culture where everyone can bring their whole selves to work. We are committed to equal opportunities and welcome applicants from all backgrounds.

Some of our Company perks :

• Global company with huge growth potential
• 25 working days per year vacation entitlement
• 5 Sick Days per calendar year
• Team events sponsored by the company
• Free refreshments in the office
• Private health insurance

We are committed to ensuring that we provide equal opportunities for all. Please let us know if you need us to make any adjustments or if you have any special requirements for the interview process.

J-18808-Ljbffr