Application Security Engineer - Warsaw Hybrid

Asana; Warszawa; Hybrid; PLN 356,004 - 404,550; Full time

Benefits offered by this job

Health insurance

Meal allowances

Office-centric hybrid schedule

Equity/RSUs

Job summary

Asana in Warsaw seeks an Application Security Engineer to join the Security team. You will partner with IT, infrastructure, and product teams to design and ship secure software, conducting security reviews and threat modeling across products and internal apps.

You’ll develop and deliver training on secure coding, stay ahead of threats, and help evolve risk management as part of a collaborative security function. Office-centric hybrid schedule in Warsaw.

Qualifications

• 5+ years of experience in application security, product security, or software engineering with security focus.
• Strong software engineering background: Python, JavaScript/TypeScript, or Scala.
• Deep knowledge of OWASP Top 10 and common web vulnerabilities (XSS, CSRF, SSRF, SQLi).
• Experience with security design reviews, threat modeling, vulnerability assessments.

Responsibilities

• Conduct security architecture reviews and threat modeling for new features and services.Identify risks early and influence secure design decisions.
• Perform vulnerability assessments of software and systems and prioritize weaknesses.
• Triage, investigate, and remediate vulnerabilities from bug bounty and tooling, tracking SLAs.
• Influence engineering through security constraints in design/roadmap reviews and trade-offs.
• Investigate security incidents using logs and monitoring tools to assess impact and root cause.
• Deliver training on secure coding, threat modeling, and emerging threats.
• Stay informed on industry threats to keep security posture robust.

Skills

Security design reviews

Threat modeling

Vulnerability assessments

OWASP Top 10 knowledge

SAST/DAST tools

SCA tools

Python

JavaScript/TypeScript

Scala

Communication skills

Tools

SAST

DAST

SCA

Job description

Asana in Warsaw seeks an Application Security Engineer to join the Security team. You will partner with IT, infrastructure, and product teams to design and ship secure software, conducting security reviews and threat modeling across products and internal apps.

You’ll develop and deliver training on secure coding, stay ahead of threats, and help evolve risk management as part of a collaborative security function. Office-centric hybrid schedule in Warsaw.