Senior Application Security Engineer

OANDA Poland sp. z o.o.; Kraków; On-site; PLN 180,000 - 300,000; Full time

Job summary

OANDA Poland sp. z o.o. seeks a Senior Application Security Engineer to push security left across the product ecosystem.

You will collaborate with cross-functional engineering teams and demonstrate secure design principles in hands-on coding engagements. Operating across a modern multi-language stack and cloud environments, you will tackle security challenges at every layer, automate DevSecOps pipelines, and pioneer AI security tooling to protect customers and data.

Qualifications

• Lead security practices and threat modeling across projects.
• Hands-on coding across a multi-language stack to demonstrate secure design principles.
• Experience with DevSecOps and secure design principles.
• Familiarity with cloud security and infrastructure as code.

Responsibilities

• Lead design reviews and establish secure coding practices.
• Build security-critical components and fix vulnerabilities across languages (JS, Go, Python, C++, Java).
• Automate DevSecOps pipelines and security tooling.
• Lead threat modeling exercises to identify risks in development.
• Pioneer AI security practices and secure AI development.

Skills

Security leadership

Threat modeling

Secure coding

Multi-language stack

DevSecOps

Cloud security

AI security tooling

Education

Bachelor's in Computer Science

Tools

Terraform

Static code analysis

Fuzzing

CI/CD security tooling

PKI & cryptography

Job description

Fancy helping to shape the future of FinTech? We have always been innovators. In 1996 we were the first company to share exchange rate information, free of charge on the internet. Today, we are a world leading online trading group.

Join us to: Help build the future of online trading Be part of a culture driven by integrity and global impact Become part of an award-winning company - check out our full list of awards here We are only as good as our people. Luckily, our people are the best. Join us!

How do we work?

We are looking for a Senior Application Security Engineer to join our global Team and help us "push security left" across our entire product ecosystem.

At OANDA, we believe security is everyone's responsibility, so we focus on developer education, continuous automation and building defense-in-depth rather than just checking compliance boxes.

You will work directly with cross-functional engineering teams in hands-on coding engagements to demonstrate secure design principles in action.

Operating across a modern, multi-language stack and cloud environments, you’ll tackle security challenges at every layer.

From automating DevSecOps pipelines to pioneering AI security tooling, we foster a high-energy environment focused on continuous growth and partnership.

In this role, you will:

• Lead & Advocate: Provide technical leadership in application security, conduct threat modeling, lead design reviews, and establish secure coding practices.
• Build & Remediate: Directly build security-critical components and fix vulnerabilities across multiple languages (JS, Go, Python, C++, Java).
• Apply Defense-in-Depth: Touch every layer of our stack — from system hardening and Terraform (IaC) cloud security to reviewing C++ code and applying modern cryptography/secrets management (PKI, hashing).
• Automate DevSecOps: Implement static code analysis, fuzzing, composition analysis, to make security proactive and effortless for developers.
• Threat Modelling: Develop and lead on Threat Modelling exercises to identify risk, threats and vulnerabilities in the development phase of our applications.
• Pioneer AI Security: Identify and implement best practices for secure AI development and AI security tooling.
• Secure Supply Chains: Work with dev teams to identify, track, and remediate third-party library vulnerabilities and supply-chain risks.

Nice to have:

• Experience in Fintech / Financial Services (or familiarity with financial security threat models & regulations).
• Hands-on experience writing Terraform (Infrastructure as Code) and managing cloud secrets.
• Exposure to AI development frameworks, AI tooling security, or LLM vulnerability vectors.
• Knowledge of industry compliance standards & privacy regulations (SOC2, ISO27001, NIST, GDPR).
• Active involvement in the wider cybersecurity community (conferences, open-source security projects).

___

At OANDA, to help us efficiently process applications, we use AI-driven tools to help source and rank candidates based on professional experience and skills.

While these tools provide recommendations, our recruitment process remains human-centric: all final shortlisting and hiring decisions are made by OANDA team.

You have the right to request a human review of your application.

OANDA Global Corporation is a diverse and global team with offices around the world.

We value the unique skills and experiences each individual brings to OANDA.

We are committed to creating and sustaining a collegial work environment in which all individuals are treated with dignity and respect and one which reflects the diversity of the community in which we operate.

We provide an inclusive and accessible environment for everyone.

Candidates selected for an interview will be contacted directly.

If you require accommodation during the recruitment and selection process, please let us know.

We will work with you to provide as seamless a recruitment experience as possible.

Learn more about our culture here.

Review OANDA Privacy Policy and learn more about how we treat your personal data and protect your privacy.

Make your first step toward a positive change in your career with OANDA

OANDA aims to transform all aspects of how the world interacts with currencies, whether that be trading or utilizing currency data and information.

We’ll do this our way – connecting and collaborating with the best and most innovative to grow quickly and globally.

We strive to do more than just our jobs, focus our actions on collective goals and dare to seek out innovation and creativity.

All this to continue our obsession with providing the best experience for our customers.

Innovation has been at the heart of everything we do!

From our roots in 1997 providing free currency exchange information over the internet to launching an award-winning global trading business.

We work together to drive the future of currency data solutions and trading technology.

Our customers can invest in around 200 financial instruments including currencies, shares (over 1300) and commodities leveraging intelligent support and the newest technologies.

What is more, we are now offering a batch of popular cryptocurrencies in the US!

- OANDA is now a major global player.

We are proud to be recognized!

We put our clients at the heart of our innovation and services, which has earned us some of the most recognized awards in the industry.

Most Trusted Broker, Compare Forex Brokers’ Awards, 2025 Best in Class for Mobile Trading Apps, ForexBrokers.com Annual Awards, 2025 Best Forex/CFD Broker in AMER, TradingView Broker Awards, 2024 Broker of the Year 2023, TradingView Broker Awards, 2023