Staff Application Security Engineer

Ivanti; Milano; Remoto; EUR 70.000 - 90.000; Tempo pieno

Descrizione del lavoro

A leading cybersecurity company is hiring a Staff Application Security Engineer to design and enhance secure products and lead security education initiatives. Candidates should have over 5 years of experience in web application security, strong programming skills, and a proven track record in vulnerability management. The role offers remote flexibility and competitive compensation, along with a commitment to diversity and inclusion.

Servizi

Flexible schedules

Health and wellness plans

Learning and development opportunities

Competenze

• Over 5 years of experience in web application security.
• Deep technical knowledge of security vulnerabilities and exploit techniques.
• Experience in maintaining security tools and processes for large-scale codebases.

Mansioni

• Integrate security best practices in the software development lifecycle.
• Build security tools for vulnerability detection and remediation.
• Lead security education initiatives for stakeholders.

Conoscenze

Web application security expertise

Applied cryptography

Vulnerability assessment

Programming skills in Python

Collaboration in cross-functional teams

Strumenti

SAST

SCA

DAST

Descrizione del lavoro

Staff Application Security Engineer

EMEA, Remote

Are you an experienced Staff Security Engineer driven to deliver cutting-edge security solutions and champion technical excellence? At Ivanti, you will play a pivotal role in shaping the future of secure digital work by designing and enhancing world-class products used across the globe. Join our dynamic, collaborative team and make a meaningful difference—helping organizations thrive securely in a fast-paced, ever-evolving digital landscape.

What you’ll do

• Manage the integration of security best practices throughout all phases of the software development lifecycle, ensuring robust protection of Ivanti’s products, services, and IT assets.
• Build innovative and scalable security tools, processes, and solutions to proactively detect, remediate, and mitigate vulnerabilities across large and complex codebases.
• Design secure architectures, perform comprehensive threat modeling, and lead penetration testing and code reviews on both web and mobile applications to maintain the highest levels of security.
• Partner with development, operations, and architecture teams to deeply embed security into DevOps practices and foster a culture of continuous security awareness throughout the organization.
• Lead security education initiatives by delivering clear, actionable training and documentation to cross-functional teams, and by driving vulnerability remediation efforts with stakeholders of varying technical backgrounds.
• Collaborate with global product and engineering teams, business leaders, and third-party security vendors to interpret vulnerability reports and coordinate effective security solutions and disclosure programs.
• Advise stakeholders on prioritizing vulnerabilities, implementing secure coding standards, applying cryptographic techniques, and adopting industry-leading security protocols and compliance practices.

What you will bring

• Over 5 years of experience in web application security, with deep technical knowledge of both common and advanced security vulnerabilities, exploitation techniques, and practical remediation strategies.
• Proven expertise in applied cryptography, threat modeling, vulnerability assessment (including CVSS scoring and penetration testing), as well as secure software development practices across SSDLC and CI/CD pipelines.
• Experience implementing and maintaining security tools and processes for large-scale codebases (such as SAST, SCA, DAST, container scanning), and providing secure coding education to developers.
• Strong programming skills (preferably in Python), with the ability to explain complex security topics clearly to diverse technical and non-technical stakeholders.
• Demonstrated ability to work cross-functionally in collaborative environments, contributing to responsible disclosure, bug bounty, and vulnerability management programs, as well as securing cloud and SaaS environments at scale.

Why Ivanti?

• Remote-friendly, flexible schedules: Empower excellence in every setting and elevate human potential.
• Competitive compensation & total rewards: Including health, wellness, and financial plans tailored for you and your family.
• Global, diverse teams: Collaborate with talented people from 23+ countries.
• Learning & development: Grow your skills with access to best-in-class learning tools and programs.
• Equity & belonging: We value every voice. Your story helps inform our solutions for a changing world.

Inclusion at Ivanti

Ivanti is proud to be an Equal Opportunity Employer. We’re committed to building a diverse team and fostering an inclusive environment where everyone belongs. We welcome applicants from all backgrounds and walks of life.

Contact

Need adjustments during the process? Reach out to [e-mail]—we’re happy to help.

Ready to make your mark?

Apply today and shape the future of Everywhere Work with Ivanti!