Application Security Engineer - Cloud & Web Security

The Fork; Lombardia; On-site; EUR 67,000 - 73,000; Full time

Benefits offered by this job

Health insurance

Lunch vouchers

Team building events

Life Insurance

Calm app access

Job summary

TheFork is hiring an Application Security Engineer to join our growing security team and protect our web apps and systems. You will evaluate security posture and drive fixes in a fast-paced environment.

We expect a Bachelor’s in a technical field, 4+ years of manual security testing, strong knowledge of security protocols, and hands-on AWS experience in a hybrid cloud setup. Certifications are desirable but not required.

Qualifications

• Bachelor’s degree in a technical field; Information Systems or Computer Science preferred.
• At least 4+ years of demonstrated manual security testing.
• Solid understanding of security protocols, cryptography, authentication and authorization.
• Experience in a hybrid cloud environment, e.g., AWS.

Responsibilities

• Scanning TheFork web applications for vulnerabilities and ensuring fixes.
• Working knowledge of Node.js/Typescript as an OO language example.
• Strong IaaS security skills with focus on AWS.
• Researching new security threats and exploit techniques.
• Responding to threats and helping implement new requirements.
• Providing technical guidance to developers.
• Maintaining confidentiality of investigation information in a team setting.
• Applying OWASP concepts across solutions.

Skills

Manual security testing

OWASP concepts

Cloud security (AWS)

Programming: Node.js/Typescript basics

Team collaboration

Education

Bachelor’s Degree in Information Systems or Computer Science

Tools

AWS

IaaS security

Job description

TheFork is hiring an Application Security Engineer to join our growing security team and protect our web apps and systems. You will evaluate security posture and drive fixes in a fast-paced environment.

We expect a Bachelor’s in a technical field, 4+ years of manual security testing, strong knowledge of security protocols, and hands-on AWS experience in a hybrid cloud setup. Certifications are desirable but not required.