AppSec: Vulnerability Discovery Engineer

Zohorecruit; Polska; Hybrid; PLN 352,000 - 509,000; Full time

Job summary

Dropbox is seeking an Application Security Engineer (Contractor) to partner with the Product Security organization. You will triage and validate vulnerabilities found through manual reviews, automated tooling, bug reports, and AI-assisted analyses, while partnering with engineering teams to drive remediation and secure SDLC practices.

You will review PRs, assist with incident responses, and develop tooling to improve security coverage and reduce manual effort across engineering organizations.

Qualifications

• 3+ years of application security engineering experience.
• Experience with vulnerability handling and bug bounty programs.
• Experience with SDLC security and cross-functional partnering.
• Strong communication and relationship-building skills.
• Knowledge of OWASP Top 10 and API security.

Responsibilities

• Triage, validate, and prioritize security vulnerabilities from multiple sources.
• Participate in on-call rotation for security incident triage and code reviews.
• Drive remediation with engineering teams and ensure timely closure of findings.
• Review security-related PRs and provide guidance on secure implementations.
• Analyze AI-generated security findings to reduce false positives and drive remediation workflows.
• Develop security tooling, automation, and workflows to improve coverage.

Skills

Communication skills

Relationship building

Secure Development Lifecycle

Tools

SAST

DAST

SCA

IaC scanning

Vulnerability management platforms

Job description

Dropbox is seeking an Application Security Engineer (Contractor) to partner with the Product Security organization. You will triage and validate vulnerabilities found through manual reviews, automated tooling, bug reports, and AI-assisted analyses, while partnering with engineering teams to drive remediation and secure SDLC practices.

You will review PRs, assist with incident responses, and develop tooling to improve security coverage and reduce manual effort across engineering organizations.