Application Security Engineer - DevSecOps & SAST/DAST

SNI; Wrocław; In loco; PLN 150.000 - 230.000; Tempo pieno

Descrizione del lavoro

SNI is seeking an experienced Application Security Engineer to support secure coding across the SDLC and to implement automated security testing and threat modeling practices. You will work with development teams to identify, prioritize, and remediate vulnerabilities using SAST, DAST, and SCA tools.

The role requires hands-on security tooling, scripting ability, and collaboration with product teams to ensure compliance with internal standards and industry baselines.

Competenze

• 2–5 years of hands-on experience in application security or secure software development.
• Hands-on with SAST/DAST/ SCA tools and secure coding practices.
• Knowledge of OWASP Top 10, ASVS, and CWE.
• Experience in CI/CD integration and DevSecOps.
• Programming or scripting in Python, Java, or .NET.

Mansioni

• Assist development teams in adopting secure coding practices across the full SDLC.
• Execute security assessments using SAST, DAST, and SCA tools to identify, prioritize, and remediate vulnerabilities.
• Contribute to threat modeling and security design reviews.
• Integrate security tooling into CI/CD pipelines (DevSecOps).
• Develop security awareness programs and practical guidelines for engineers.
• Support product/platform teams to align with internal security policies and regulatory standards.

Conoscenze

Application security

Secure SDLC

CI/CD security

Threat modeling

Programming/scripting (Python/Java/.NE

Formazione

Bachelor's or Master's in CS/IS

Strumenti

Semgrep

SonarQube

HCL AppScan

OWASP ZAP

Black Duck

Sonatype Lifecycle

Descrizione del lavoro

SNI is seeking an experienced Application Security Engineer to support secure coding across the SDLC and to implement automated security testing and threat modeling practices. You will work with development teams to identify, prioritize, and remediate vulnerabilities using SAST, DAST, and SCA tools.

The role requires hands-on security tooling, scripting ability, and collaboration with product teams to ensure compliance with internal standards and industry baselines.