Application Security Engineer – SDLC & DevSecOps

Billennium; Wrocław; On-site; PLN 130,000 - 180,000; Full time

Benefits offered by this job

Stable cooperation with international팀

Challenging projects with modern tech

Opportunities for professional growth

Job summary

Billennium is seeking a Professional Application Security Engineer to strengthen our AppSec capabilities. You will collaborate with development teams, architects and security professionals to embed security across the Software Development Lifecycle.

You will perform vulnerability analysis, threat modelling and secure coding guidance while working with SAST, DAST and SCA tools in CI/CD pipelines within cloud-native environments.

Qualifications

• Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Security or related field, or equivalent practical experience.
• 4–5 years of relevant professional experience in Application Security, Software Security or secure software development.
• Hands-on experience with application security assessments, vulnerability analysis and security testing.
• Able to write and review secure code and translate findings into actionable guidance.

Responsibilities

• Support development teams in integrating security throughout the SDLC and applying secure coding practices.
• Perform and support application security assessments and vulnerability analysis.
• Review and prioritize security findings and provide remediation guidance to developers.
• Work with SAST, DAST and SCA solutions and CI/CD pipelines.
• Contribute to threat modelling, security design reviews and established security patterns.
• Help improve app security tooling and controls in CI/CD pipelines.
• Support security of cloud-native apps, containers and Kubernetes environments.
• Communicate vulnerabilities and remediation options clearly to stakeholders.

Skills

Application security

Secure SDLC

OWASP Top 10

SAST/DAST/SCA

Programming (Python/Java/.NET)

Git/Jenkins

Cloud & Kubernetes

Education

Bachelor's or Master's in Computer Science/Cybersecurity

Tools

Semgrep

SonarQube

HCL AppScan

ZAP

Black Duck

Sonatype Lifecycle

Job description

Billennium is seeking a Professional Application Security Engineer to strengthen our AppSec capabilities. You will collaborate with development teams, architects and security professionals to embed security across the Software Development Lifecycle.

You will perform vulnerability analysis, threat modelling and secure coding guidance while working with SAST, DAST and SCA tools in CI/CD pipelines within cloud-native environments.