Senior Application Security Engineer — Automate Security at Scale

Capital.com; Warszawa; Hybrid; PLN 260,000 - 420,000; Full time

Benefits offered by this job

Annual Bonus

Generous Annual Leave

Medical Insurance

Hybrid work model

Workation policy

Volunteer leave

Job summary

Capital.com's Product Security team protects our web and mobile applications, infrastructure, and external perimeter in a highly regulated environment. As Senior/Staff Application Security Engineer, you will raise the bar for application security across the organisation, designing, automating, and scaling security processes so many engineering teams can build securely by default.

You will lead security architecture reviews, threat modelling, and secure tooling across SDLC, work with DevOps and

Qualifications

• 5+ years in application or product security with senior impact.
• Experience leading security architecture reviews and threat modelling across multiple teams.
• Proven ability to automate and scale security processes with tooling and self-service workflows.

Responsibilities

• Lead security architecture reviews and threat modelling for new and existing systems.
• Design, build, and automate scalable security processes for self-serve engineering teams.
• Integrate security checks across SDLC and CI/CD pipelines (SAST, DAST, SCA, secrets, IaC).
• Own and evolve security tooling (DefectDojo, SAST/DAST/SCA platforms).
• Apply AI/LLM tooling to security work and define its safe adoption.
• Conduct security assessments of web/mobile apps, APIs, and cloud infra; perform PoC.
• Mentor engineers and drive secure development practices.

Skills

Security architecture reviews

Threat modelling

Automation & tooling

Code review

Python/Go/JS

OWASP Top Ten

AI/LLM tooling

Security testing

Tools

SAST/DAST/SCA platforms

DefectDojo

CI/CD integration

Job description

Capital.com's Product Security team protects our web and mobile applications, infrastructure, and external perimeter in a highly regulated environment. As Senior/Staff Application Security Engineer, you will raise the bar for application security across the organisation, designing, automating, and scaling security processes so many engineering teams can build securely by default.

You will lead security architecture reviews, threat modelling, and secure tooling across SDLC, work with DevOps and