Senior Application Security Architect & Automation Leader

Lever, Inc.; Warszawa; Hybrid; PLN 260,000 - 380,000; Full time

Benefits offered by this job

Annual bonus

Medical Insurance

Hybrid work model

Job summary

Capital.com is seeking a Senior/Staff Application Security Engineer to elevate security across web, mobile, and cloud platforms. You will lead architecture reviews, threat modelling, and the design of scalable, self-service security tooling for multiple engineering teams.

You’ll drive secure design, automate checks into CI/CD, and apply AI/LLM tooling to security reviews, code checks, and vulnerability triage.

Qualifications

• 5+ years in application or product security, or equivalent depth, with a track record of senior or staff-level impact.
• Demonstrable experience leading security architecture reviews and threat modelling across multiple teams or products.
• Proven ability to automate and scale security processes by building tooling, integrations, and self-service workflows that reduce manual effort.

Responsibilities

• Lead security architecture reviews and threat modelling for new and existing systems, using AI tools to make reviews faster, more consistent, and scalable across teams.
• Act as a security force multiplier by influencing the standards, patterns, and guardrails that let teams move fast and stay secure.
• Design, build, and automate scalable security processes that engineering teams can self-serve, covering secure design review, threat modelling, testing, and remediation workflows.
• Integrate and automate security checks across the SDLC and CI/CD pipelines (SAST, DAST, SCA, secrets, and IaC scanning), tuned for strong signal and low friction.
• Own and evolve security tooling such as DefectDojo and SAST, DAST, and SCA platforms, maximising automation, coverage, and integration.
• Apply AI and LLM-based tooling to architecture review, threat modelling, code review, and vulnerability triage, and help define how the team adopts these tools safely.
• Conduct and oversee security assessments of web and mobile applications, APIs, and cloud infrastructure, including manual testing and PoC development.
• Run vulnerability scans across internal infrastructure and the external perimeter, then analyse findings, define remediation, and track issues to closure.
• Support and triage the Bug Bounty Program and external vulnerability reports, automating triage where possible.
• Participate in and help lead red teaming and offensive security exercises.
• Drive knowledge sharing on secure development, mentor engineers, and deliver training for development and QA teams.

Skills

Threat modelling

Security architecture

Automation & tooling

Code review

SAST/DAST/CI/CD

AI & LLM tooling

Security testing

REST & microservices

Kubernetes security

OWASP

Tools

DefectDojo

SCA platforms

Job description

Capital.com is seeking a Senior/Staff Application Security Engineer to elevate security across web, mobile, and cloud platforms. You will lead architecture reviews, threat modelling, and the design of scalable, self-service security tooling for multiple engineering teams.

You’ll drive secure design, automate checks into CI/CD, and apply AI/LLM tooling to security reviews, code checks, and vulnerability triage.