Remote AppSec Engineer — AI-First Security & Tools

Camunda; Poland; Remote; PLN 477,000 - 769,000; Full time

Benefits offered by this job

Remote work

Home office budget

Annual kickoff event

Live Well program

Equity plan

Job summary

Camunda is an AI-first enterprise platform enabling agentic orchestration across AI agents, people, and systems for end-to-end business processes. We seek an Information Security Engineer focused on Application Security to join our security team and help review designs, model threats, and triage vulnerabilities while building internal tools.

You will collaborate with R&D, contribute to CVE tooling, and participate in on-call rotation and incident response, driving secure software with a

Qualifications

• 3+ years in security or software engineering.
• Experience at a SaaS or software product company.
• Hands-on vulnerability triage with tools like Snyk, Trivy, Semgrep or CodeQL.

Responsibilities

• Triage findings from SCA, container and code scanning; assess impact; coordinate fixes with engineering.
• Run threat modeling sessions and design reviews for new features and architecture changes.
• Use and improve LLM-assisted tooling to review code, validate findings and reproduce issues.
• Build internal security tooling, including CVE registry automation and integration with scanners and teams.
• Help engineers adopt secure-by-default practices; review PRs and improve guidelines.
• Participate in on-call rotation and incident response.
• Write security advisories for customers and support audits.

Skills

3+ years in security

SaaS experience

Vulnerability triage

Threat modeling (STRIDE)

Java code reading

Tools

Snyk

Trivy

Semgrep

CodeQL

Job description

Camunda is an AI-first enterprise platform enabling agentic orchestration across AI agents, people, and systems for end-to-end business processes. We seek an Information Security Engineer focused on Application Security to join our security team and help review designs, model threats, and triage vulnerabilities while building internal tools.

You will collaborate with R&D, contribute to CVE tooling, and participate in on-call rotation and incident response, driving secure software with a