Senior Application Security Engineer (Remote Europe)

Nebius Group; Amsterdam; Remote; EUR 120,000 - 180,000; Full time

Benefits offered by this job

Competitive compensation

Career growth & learning

Flexibility & ownership

Collaborative culture

Impactful AI projects

International environment

Job summary

Nebius is seeking a Senior/Staff Application Security Engineer to safeguard our software. You will identify vulnerabilities, implement best security practices, and collaborate with development teams.

Strong background in secure coding, threat modeling, and Secure SDLC is required. Responsibilities include building ASPM at scale, automating SAST/SCA in CI/CD, improving detection rules, and staying ahead of threats with modern mitigation techniques.

Qualifications

• 6+ years of experience in application security.
• Strong knowledge of OWASP Top 10 and mitigation approaches.
• Proficiency in secure coding in Python/Go/Java/JS.
• Hands-on security testing tool experience (Burp, ZAP, Semgrep).
• Understanding of SAML/OIDC authentication protocols.
• Experience conducting threat modeling sessions.

Responsibilities

• Build and maintain Application Security Posture Management at scale.
• Automate SAST/SCA in CI/CD pipelines; reduce false positives.
• Identify, analyze and remediate application security vulnerabilities.
• Collaborate with development teams to embed security in SDLC.
• Develop secure coding guidelines for developers.
• Conduct threat modeling and risk assessments for new and existing apps.

Skills

6+ yrs exp

OWASP Top 10

Secure coding (Python/Go/Java/JS)

Go or Python

Security testing tools

Auth protocols SAML/OIDC

Threat modeling

Tools

Burp Suite

ZAP

Semgrep

Job description

Nebius is seeking a Senior/Staff Application Security Engineer to safeguard our software. You will identify vulnerabilities, implement best security practices, and collaborate with development teams.

Strong background in secure coding, threat modeling, and Secure SDLC is required. Responsibilities include building ASPM at scale, automating SAST/SCA in CI/CD, improving detection rules, and staying ahead of threats with modern mitigation techniques.