Application Security Engineer

LionHires Recruitment; Poland; On-site; PLN 180,000 - 240,000; Full time

Job summary

LionHires Recruitment partners with a tech company to recruit a Senior Application Security Engineer. You will design secure architectures from cloud infrastructure to application layers, embedding secure by design across AWS environments, and lead threat modeling automation.

You will collaborate with product managers, architects, and developers to scale security controls, review CI/CD pipelines, and oversee security strategy for migrating legacy workloads to the cloud.

Qualifications

• Hands-on experience integrating security tooling into CI/CD pipelines.
• Strong scripting skills in Python and Shell.
• Deep familiarity with Docker and Istio/service mesh.
• Background in security architecture reviews and threat modeling.
• Solid understanding of supply chain security and secure delivery.
• Knowledge of PCI-DSS, ISO 27001, NIST and GDPR compliance.
• Experience architecting secure services on Kubernetes/AWS and industry certs.

Responsibilities

• Design and implement security architecture from cloud infrastructure to application layer.
• Collaborate with product managers, architects, and developers to scale security controls.
• Validate security implementations in CI/CD pipelines and deployment manifests.
• Define policies and controls to protect global products and environments.
• Build and automate declarative threat modeling to identify risks.
• Oversee the product security strategy for migrating legacy workloads to AWS.
• Serve as trusted cybersecurity advisor in planning cycles and technical committees.

Skills

DevSecOps

CI/CD

Python

Shell scripting

Docker

Istio

Threat modeling

Supply chain security

Compliance & privacy

Kubernetes

AWS

CISSP/CCSP

Tools

GitLab

Jenkins

Terraform

Helm

CloudFormation

Docker

Istio

Kubernetes

AWS

Job description

Are you a cybersecurity champion who thrives on embedding "secure by design" principles into cutting‑edge cloud infrastructure and microservices? We are looking for a Senior Application Security Engineer to act as a trusted advisor, driving the evolution of secure product engineering from legacy data centers to AWS. If you want to own threat modeling automation, champion supply chain security, and influence engineering roadmaps in a high‑scale environment, this is your next big move.

About the Client

Our partner is a tech company building product engineering across Fintech, iGaming, and Marketing. They turn innovative ideas into high‑performing engines and launch them at scale. As their exclusive recruitment partner, Lionhires manages their full‑cycle talent acquisition, connecting top‑tier tech talent with this fast‑growing ecosystem.

What You Will Do

• Design and implement robust security architecture spanning from cloud infrastructure down to the application layer, ensuring "secure by design" principles are met.
• Collaborate closely with product managers, architects, and developers to build and scale the security controls platform ecosystem.
• Validate and proof security implementations within infrastructure, application deployment manifests, and automated CI/CD pipelines.
• Define critical policies, controls, and capabilities to protect global products and environments.
• Build and automate declarative threat modeling to proactively identify and mitigate application risks.
• Oversee the product security strategy for migrating legacy data center workloads to the public cloud (AWS).
• Serve as a trusted cybersecurity advisor to engineering and product teams, participating actively in planning cycles and technical committees.

What You Bring

• DevSecOps Core: Hands‑on experience integrating security scanning/tooling into CI/CD pipelines (GitLab, Jenkins) and utilizing Infrastructure-as-Code models (Terraform, Helm, or CloudFormation).
• Scripting Skills: Strong development experience in Python and Shell scripting.
• Modern Infrastructure: Deep familiarity with Docker and service mesh technologies (such as ISTIO).
• Security Assessments: Strong background in architecture/security reviews, threat modeling, and application risk mitigation within an Agile framework.
• Software Integrity: A rock‑solid understanding of supply chain security, software integrity, and secure software delivery.
• Compliance & Privacy: Familiarity with industry regulations and frameworks (PCI‑DSS, ISO 27001, NIST) and privacy laws like GDPR.
• Bonus Points: In‑depth experience architecting secure services on Kubernetes/AWS and holding industry certifications (e.g., CISSP, CISM, CCSK, CCSP, CEH).

What's in It for You

• True Ownership: You will have the autonomy to influence our security roadmap and make architectural decisions that protect our production environments.
• Impactful Work: Your work directly safeguards real‑money flows and critical financial data, making a tangible difference in the security of our users.
• Collaborative Culture: Join a cross‑functional team of experts in engineering, fraud, and payments who value security and knowledge sharing.
• Continuous Growth: We invest in your professional development through support for advanced certifications, conference attendance, and research time.
• Competitive Benefits: We offer a comprehensive benefits package, including competitive compensation, health coverage, and flexible working arrangements.