AppSec Program Lead & Security Champion (Hybrid/Remote)

Awin; Milano; In loco; EUR 90.000 - 120.000; Tempo pieno

Vantaggi offerti da questo lavoro

Flexi-Week

Flexi-office

Remote work furniture allowance

Health and wellbeing

Development: Awin Academy

Peer recognition

Descrizione del lavoro

Awin in Milan, Lombardy, Italy is seeking an Application Security Engineer to establish and lead a comprehensive AppSec program within the Product and Technology department. You will evangelize AppSec, assess design proposals, and drive secure development practices across engineers and managers.

Responsibilities include integrating security tooling into CI/CD, threat modelling, secure coding guidance, vulnerability lifecycle management, and leading a Security Champions initiative to scale

Competenze

• 5+ years in application security or related roles.
• Experience securing web applications with engineers/product managers.
• Experience in Agile environments.
• Proficient in English (spoken and written).
• Mentorship and training abilities.
• Ability to work across two departments with multiple touchpoints.

Mansioni

• Secure the SDLC: Integrate security tooling into CI/CD pipelines and IDEs.
• Threat modelling secure design: Collaborate with product and engineering teams during the design phase.
• Code architecture reviews: Guide developers on secure coding practices and remediation support.
• Vulnerability lifecycle management: Identify, triage, track and report vulnerabilities across apps and systems.
• Support the bug bounty process with finding validation.
• Present vulnerability management reports to heads of department.
• AI/ML security: Guidance on secure development of AI/LLM-powered features and risk management.
• Incident response collaboration: Support investigation and post-incident reviews.
• Security culture enablement: Act as a security champion and deliver trainings.
• Research innovation: Propose and test ideas to reduce risk in software supply chain.

Conoscenze

JavaScript

Python

PHP

Mentorship

Interpersonal skills

English proficiency

Agile experience

Strumenti

SAST

DAST

SCA tools

CI/CD tooling

Dashboards

AWS

Containers

Terraform

Descrizione del lavoro

Awin in Milan, Lombardy, Italy is seeking an Application Security Engineer to establish and lead a comprehensive AppSec program within the Product and Technology department. You will evangelize AppSec, assess design proposals, and drive secure development practices across engineers and managers.

Responsibilities include integrating security tooling into CI/CD, threat modelling, secure coding guidance, vulnerability lifecycle management, and leading a Security Champions initiative to scale