Senior Application Security Engineer

Adecco; Warszawa; Hybrid; PLN 210,000 - 270,000; Full time

Benefits offered by this job

Private medical care

Life insurance

Hybrid work model

Job summary

Adecco is seeking a hands-on Senior Application Security Engineer to lead the Application Security programme across the SDLC in Warsaw. You will collaborate with Security, DevOps and engineering teams, providing secure architecture guidance and integrating scalable security controls into CI/CD workflows.

You bring 5–10 years of App Security experience, cloud-native and API expertise, and practical skills with SAST, SCA, DAST, and IaC scanning.

Qualifications

• 5–10 years of Application Security or secure software development experience.
• Experience supporting or building an App Security programme in CI/CD-heavy env.
• Strong understanding of cloud-native apps, containers, microservices and APIs.
• Hands-on with SAST, SCA, DAST, secrets management and IaC scanning.
• Experience with CI/CD tools like GitHub Actions, GitLab CI or Jenkins.
• Familiar with penetration-testing methods and tools (Burp Suite, Kali).
• Excellent stakeholder communication and collaborative skills.
• Ability to mentor teams and drive security initiatives.
• English at B2/C1 level and Polish language skills.

Responsibilities

• Participate in developing the Application Security programme, including tooling and risk reporting.
• Own integrations between App Security tools and CI/CD pipelines.
• Provide secure design and architecture guidance across product development.
• Oversee SAST, SCA, secrets scanning, IaC and DAST implementations.
• Mentor App Security engineers and promote a security-first culture.
• Collaborate with GRC and compliance teams on OWASP and FedRAMP.
• Develop meaningful Application Security KPIs and reporting.

Skills

Security leadership

CI/CD collaboration

Cloud-native apps

Containers & microservices

APIs

Mentoring

Stakeholder communication

English (B2/C1)

Polish language

Tools

Burp Suite

Kali Linux

GitHub Actions

GitLab CI

Jenkins

Semgrep

Mend

GitHub Advanced Security

HCL AppScan

IAST/runtime protection

Job description

Our client is a global technology company operating in the lottery sector and delivering secure retail and digital solutions for government and regulated customers worldwide. The company is establishing a new Application Security capability in Warsaw to strengthen secure software development across its cloud-native products.

ABOUT THE ROLE

We are looking for a hands‑on Senior Application Security Engineer who will help develop and mature the Application Security programme across the software development lifecycle. You will work closely with Security, DevOps and engineering teams, provide secure architecture guidance and integrate scalable security controls into CI/CD workflows.

KEY RESPONSIBILITIES

• Participate in developing the Application Security programme, including tooling, policies, developer engagement and risk reporting.
• Own integrations between Application Security tools and CI/CD pipelines.
• Provide secure design and architecture guidance throughout product development.
• Oversee the implementation and optimisation of SAST, SCA, secrets scanning, Infrastructure-as-Code scanning and DAST solutions.
• Partner with development teams on secure coding practices, threat modelling and vulnerability triage.
• Collaborate with GRC and compliance teams on requirements and standards, including OWASP and FedRAMP.
• Mentor and support Application Security engineers and help develop a security‑first engineering culture.
• Evaluate IAST and runtime application protection capabilities.
• Develop meaningful Application Security KPIs and reporting.

CANDIDATE PROFILE

• 5–10 years of experience in Application Security or secure software development.
• Experience supporting or developing an Application Security programme in a CI/CD-heavy engineering environment.
• Strong understanding of cloud-native applications, containers, microservices and APIs.
• Practical experience with SAST, SCA, DAST, secrets management and Infrastructure-as-Code scanning.
• Experience with CI/CD platforms such as GitHub Actions, GitLab CI or Jenkins.
• Familiarity with penetration-testing methodologies and tools such as Burp Suite or Kali Linux.
• Strong stakeholder communication, decision‑making and cross‑team collaboration skills.
• Ability to mentor others and take ownership of security initiatives.
• English at B2/C1 level and Polish language skills.

Nice to have

• Experience with IAST or runtime application protection.
• Knowledge of tools such as Semgrep, Mend, GitHub Advanced Security or HCL AppScan.

WHAT IS OFFERED

• Employment contract directly with the client.
• Hybrid work in Warsaw, with 50% of working time from the office.
• Private medical care for the employee.
• Employer-funded life insurance.
• Flexible start between 7:00 and 10:00.
• Three-month probation period followed by an indefinite employment contract.