Application Security Engineer: Build Security In Day One

Amadeus-038955bc; Warszawa; On-site; PLN 120,000 - 160,000; Full time

Job summary

Amadeus Warszawa is seeking an Application Security Engineer (development-focused white hat) to embed security into the software lifecycle, collaborating with architecture, development and QA teams. You will review designs, lead threat modelling, and help fix vulnerabilities during development.

The role requires strong secure development practices, vulnerability management, and excellent communication. Experience with Amadeus tools is a plus.

Qualifications

• Experience in software development (.NET), application security, or infrastructure security (AWS/Azure).
• Strong knowledge of secure development practices, threat modelling, and vulnerability management.
• Excellent communication, collaboration, and problem-solving skills.
• Familiarity with Amadeus LSS or Amadeus Robotics is a plus.

Responsibilities

• Review new application designs with architecture and development teams to identify security risks early and flag potential blockers before implementation begins.
• Lead threat modelling sessions with dev, QA and business teams to identify risks early in solution design.
• Review code and binary scan results, working with developers to fix vulnerabilities during development.
• Assess and manage existing vulnerabilities using CVSS, define remediation actions and track progress.
• Support PCI-DSS compliance by collecting audit evidence with dev, QA and platform teams.
• Work with QA to ensure adequate security test coverage across functional and non-functional testing.

Skills

.NET

Threat modelling

Vulnerability management

Communication

AWS/Azure

Tools

Amadeus LSS

Amadeus Robotics

Job description

Amadeus Warszawa is seeking an Application Security Engineer (development-focused white hat) to embed security into the software lifecycle, collaborating with architecture, development and QA teams. You will review designs, lead threat modelling, and help fix vulnerabilities during development.

The role requires strong secure development practices, vulnerability management, and excellent communication. Experience with Amadeus tools is a plus.