Application Security Engineer

Adecco; Warszawa; Hybrid; PLN 180,000 - 280,000; Full time

Benefits offered by this job

Employment contract

Hybrid work in Warsaw (2-3 days/week)

Job summary

Adecco is seeking an Application Security Engineer to lead and mature our secure development lifecycle across product teams. You will implement AppSec tooling, drive policy, and align with engineering leadership to scale security practices.

You will collaborate with DevOps, security, and product teams to embed secure coding, perform threat modeling, and optimize CI/CD security controls in a hybrid Warsaw environment.

Qualifications

• 5–10 years of experience in Application Security or Secure Software Development.
• Proven experience leading application security programs in CI/CD-heavy engineering environments.
• Deep expertise in securing cloud-native applications and integrating AppSec tools such as Semgrep, Mend, GitHub Advanced Security, HCL AppScan, or equivalent.
• Hands-on experience with CI/CD integrations using GitHub Actions, GitLab CI, Jenkins, or similar.
• Strong communication and influencing skills; able to drive security adoption across diverse teams.
• Knowledge of DAST tools (e.g., Tenable Web App Scanning) and Pentest methodologies (Burp Suite, Kali Linux).
• Experience with security in modern SDLC environments using containers, microservices, and APIs.

Responsibilities

• Participate in application security program, including tool selection, policy enforcement, developer engagement, and risk reporting.
• Own integration of AppSec tooling into CI/CD pipelines to enable scalable, developer-friendly security controls.
• Oversee deployment and tuning of tools for SAST, SCA, secrets management, IaC scanning, and DAST (e.g., Tenable Web App Scanning).
• Partner with product teams to embed secure coding practices, review threat models, and triage high-impact vulnerabilities.
• Collaborate with GRC/compliance teams to ensure alignment with relevant standards (e.g., OWASP, FedRAMP).
• Mentor and support other AppSec engineers and champion a security-first development culture.
• Evaluate IAST and runtime protections as part of continuous improvement efforts.
• Develop KPIs to measure security posture and tooling efficacy.

Skills

Application security

CI/CD security

SAST & SCA

DAST

Threat modeling

OWASP

Security tooling

Tools

Semgrep

Mend

GitHub Advanced Security

HCL AppScan

Tenable Web App Scanning

Job description

For our client we are seeking an Application Security Engineer to drive the strategy, implementation, and maturity of our application security program.

This individual will lead initiatives across the secure software development lifecycle, integrating application security best practices and tooling into engineering workflows, and partnering closely with security, DevOps, and engineering leadership.

This is a high-impact role that requires technical depth, leadership capability, and a passion for scaling security across product teams.

What can we offer:

• Long-term cooperation based on Employment contract
• Work mode: Hybrid in Warsaw (2-3 days per week from office)

Key Responsibilities:

• Participate application security program, including tool selection, policy enforcement, developer engagement, and risk reporting.
• Own integration of AppSec tooling into CI/CD pipelines to enable scalable, developer-friendly security controls.
• Oversee deployment and tuning of tools for SAST, SCA, secrets management, IaC scanning, and DAST (e.g., Tenable Web App Scanning).
• Partner with product teams to embed secure coding practices, review threat models, and triage high-impact vulnerabilities.
• Collaborate with GRC/compliance teams to ensure alignment with relevant standards (e.g., OWASP, FedRAMP).
• Mentor and support other AppSec engineers and champion a security-first development culture.
• Evaluate IAST and runtime protections as part of continuous improvement efforts.
• Develop KPIs to measure security posture and tooling efficacy.

Required Qualifications:

• 5–10 years of experience in Application Security or Secure Software Development.
• Proven experience leading application security programs in a CI/CD-heavy engineering environment.
• Deep expertise in securing cloud-native applications, and integrating AppSec tools such as Semgrep, Mend, GitHub Advanced Security, HCL AppScan, or equivalent.
• Hands-on experience with CI/CD integrations using GitHub Actions, GitLab CI, Jenkins, or similar.
• Strong communication and influencing skills; able to drive security adoption across diverse teams.
• Knowledge of DAST tools (e.g., Tenable Web App Scanning) and Pentest methodologies (Burp Suite, Kali Linux).
• Experience with security in modern SDLC environments using containers, microservices, and APIs.