App & API Security Architect - Build Secure, Scale Fast

Papaya Global; Kraków; Presencial; PLN 280.000 - 460.000; Jornada completa

Descripción de la vacante

Papaya Global is seeking an Application Security / Security Architect to embed security across the lifecycle of a global payroll platform. You will partner with R&D, DevOps, product, and cybersecurity teams to improve security of applications, APIs, and cloud services.

Responsibilities include threat modeling, architecture reviews, defining security requirements, and leading vulnerability remediation across code, configurations, and tooling. Strong communication with stakeholders is essential.

Formación

• 4+ years in application security or related role.
• Experience with SAST/DAST/SCA tools.
• Hands-on experience with cloud-native architectures and secure design practices.

Responsabilidades

• Own and mature the application-security and security-architecture program across product and internal applications, APIs & services, and data stores.
• Conduct threat modeling, architecture reviews, security design reviews, and risk assessments for new systems and materially changed services.
• Define application-security requirements, review triggers, and practical security patterns for authentication, authorization, secrets, data protection, input handling, and logging.
• Review source code and CI/CD security checks; provide actionable guidance to improve security posture.
• Validate findings from vulnerability-management and security assessments, and translate them into engineering tasks with clear remediation ownership.
• Manage penetration testing and bug bounty programs, including scope, triage, and verification of fixes.
• Identify recurring vulnerability themes and drive preventive improvements in engineering practices and tooling.

Conocimientos

Threat modeling

Secure SDLC

Web APIs

Code review

Vulnerability management

DevOps security

AI in security

Security architecture

Cloud security

Descripción del empleo

Papaya Global is seeking an Application Security / Security Architect to embed security across the lifecycle of a global payroll platform. You will partner with R&D, DevOps, product, and cybersecurity teams to improve security of applications, APIs, and cloud services.

Responsibilities include threat modeling, architecture reviews, defining security requirements, and leading vulnerability remediation across code, configurations, and tooling. Strong communication with stakeholders is essential.