Staff Application Security Engineer

Ivanti; Remoto; EUR 60.000 - 90.000; Tempo pieno

Descrizione del lavoro

A leading technology company in Italy is seeking a Staff Security Engineer to enhance their security solutions. The role involves integrating best practices in the software development lifecycle and designing secure architectures. Candidates should have over 5 years of experience in web application security and strong programming skills, ideally in Python. The position promotes flexible work arrangements and a collaborative culture, contributing to the overall security strategy of the organization.

Servizi

Remote-friendly, flexible schedules

Competitive compensation and total rewards

Learning and development opportunities

Inclusive workplace environment

Competenze

• Over 5 years of experience in web application security.
• Proven expertise in applied cryptography and secure coding practices.
• Demonstrated ability to work in collaborative environments.

Mansioni

• Manage the integration of security best practices in the development process.
• Build innovative and scalable security tools and solutions.
• Lead security education initiatives across teams.

Conoscenze

Web application security

Applied cryptography

Vulnerability assessment

Strong programming skills (Python)

Collaboration in cross-functional teams

Strumenti

SAST

SCA

DAST

Container scanning tools

Descrizione del lavoro

Are you an experienced Staff Security Engineer driven to deliver cutting‑edge security solutions and champion technical excellence? At Ivanti, you will play a pivotal role in shaping the future of secure digital work by designing and enhancing world‑class products used across the globe. Join our dynamic, collaborative team and make a meaningful difference—helping organizations thrive securely in a fast‑paced, ever‑evolving digital landscape. Your expertise will help safeguard countless users, while empowering innovation at every level.

Why this role matters

As a Staff Security Engineer at Ivanti, you play a crucial role in safeguarding our products and users against evolving threats. Your work ensures trust and resilience in our technology, helping organizations worldwide operate securely and innovate with confidence.

What you’ll do:

• Manage the integration of security best practices throughout all phases of the software development lifecycle, ensuring robust protection of Ivanti’s products, services, and IT assets.
• Build innovative and scalable security tools, processes, and solutions to proactively detect, remediate, and mitigate vulnerabilities across large and complex codebases.
• Design secure architectures, perform comprehensive threat modeling, and lead penetration testing and code reviews on both web and mobile applications to maintain the highest levels of security.
• Partner with development, operations, and architecture teams to deeply embed security into DevOps practices and foster a culture of continuous security awareness throughout the organization.
• Lead security education initiatives by delivering clear, actionable training and documentation to cross‑functional teams, and by driving vulnerability remediation efforts with stakeholders of varying technical backgrounds.
• Collaborate with global product and engineering teams, business leaders, and third‑party security vendors to interpret vulnerability reports and coordinate effective security solutions and disclosure programs.
• Advise stakeholders on prioritizing vulnerabilities, implementing secure coding standards, applying cryptographic techniques, and adopting industry‑leading security protocols and compliance practices.

What you will bring:

• Over 5 years of experience in web application security, with deep technical knowledge of both common and advanced security vulnerabilities, exploitation techniques, and practical remediation strategies.
• Proven expertise in applied cryptography, threat modeling, vulnerability assessment (including CVSS scoring and penetration testing), as well as secure software development practices across SSDLC and CI/CD pipelines.
• Experience implementing and maintaining security tools and processes for large‑scale codebases (such as SAST, SCA, DAST, container scanning), and providing secure coding education to developers.
• Strong programming skills (preferably in Python), with the ability to explain complex security topics clearly to diverse technical and non‑technical stakeholders.
• Demonstrated ability to work cross‑functionally in collaborative environments, contributing to responsible disclosure, bug bounty, and vulnerability management programs, as well as securing cloud and SaaS environments at scale.

Why Ivanti?

• Remote‑friendly, flexible schedules: Empower excellence in every setting and elevate human potential.
• Competitive compensation & total rewards: Including health, wellness, and financial plans tailored for you and your family.
• Global, diverse teams: Collaborate with talented people from 23+ countries.
• Learning & development: Grow your skills with access to best‑in‑class learning tools and programs.
• Equity & belonging: We value every voice. Your story helps inform our solutions for a changing world.

What drives us

Ivanti’s mission is to elevate human potential within organizations by managing, protecting and automating technology for continuous innovation.

It is through diverse and inclusive hiring, decision‑making, and commitment to our employees and partners that we will continue to build and deliver world‑class solutions for our customers.

To learn more about Ivanti’s Mission and Core Values.

Inclusion at Ivanti

Ivanti is proud to be an Equal Opportunity Employer. We’re committed to building a diverse team and fostering an inclusive environment where everyone belongs. We welcome applicants from all backgrounds and walks of life.

Need adjustments during the process? Reach out to [e-mail]— we’re happy to help.

Ready to make your mark?

Apply today and shape the future of Everywhere Work with Ivanti!

Seniority level

Mid‑Senior level

Employment type

Full‑time

Job function

Research and Engineering

Industries: Computer and Network Security, Engineering Services, and Software Development