Remote AppSec Engineer - Threat Modeling & Secure Coding

SOFTSWISS; Warszawa; Hybrid; PLN 60,000 - 90,000; Full time

Benefits offered by this job

Full-time remote work opportunities

Private insurance

Additional 1 Day Off per calendar year

Sports program compensation

Comprehensive Mental Health Programme

Free online English lessons

Generous referral program

Training and workshops

Job summary

A leading iGaming security company located in Warsaw is seeking an experienced Application Security Engineer to enhance the security of applications through the software development lifecycle. This role involves collaborating with product teams, conducting manual code reviews, managing a bug bounty program, and contributing to secure code practices. The ideal candidate has a university degree, over 2 years of experience in application security, and a deep understanding of common web vulnerabilities. Flexible working hours and full-time remote work options are available.

Qualifications

• 2+ years of experience in application security.
• Deep understanding of common web application vulnerabilities (e.g., OWASP Top 10).
• Intermediate or higher English level.

Responsibilities

• Lead threat modeling and risk assessments during the design phase.
• Perform in-depth manual code reviews to identify vulnerabilities.
• Manage the bug bounty program and collaborate on vulnerabilities.

Skills

Application security

Vulnerability assessment

Secure software development

Web application security

Threat modeling

CORS knowledge

OAuth/OIDC/JWT understanding

Root-cause analysis

Education

University degree in Computer Science or Information Security

Tools

SAST/DAST tools

Job description

A leading iGaming security company located in Warsaw is seeking an experienced Application Security Engineer to enhance the security of applications through the software development lifecycle. This role involves collaborating with product teams, conducting manual code reviews, managing a bug bounty program, and contributing to secure code practices. The ideal candidate has a university degree, over 2 years of experience in application security, and a deep understanding of common web vulnerabilities. Flexible working hours and full-time remote work options are available.