Senior Application Security Engineer - Remote

Whatnot; Kraków; Hybrid; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Remote work option

Global office hubs

Job summary

Whatnot's Application Security Team protects the products and systems used by buyers and sellers daily. We partner with product and engineering to identify risks, resolve vulnerabilities, and build secure software across web and mobile applications.

As an Application Security Engineer, you will perform security-focused code reviews, work on threat modeling, reproduce and triage vulnerabilities, support the bug bounty program, and help develop reusable security tooling.

Qualifications

• 5 years of relevant experience in application security or software security.
• Experience reviewing code for security vulnerabilities and guiding fixes.
• Understanding of application security risks and how to identify them through threat modeling.

Responsibilities

• Perform security-focused code reviews and recommend practical fixes.
• Partner with product and engineering on threat modeling and security reviews.
• Help reproduce, triage, and address security vulnerabilities in web and mobile apps.
• Support bug bounty program by investigating reports and remediation.
• Support preparation of security releases.
• Develop security patterns, processes, and automated tooling to prevent issues.

Skills

Python

Elixir

JavaScript

Threat modeling

Code review

Tools

Security tooling

Job description

Whatnot's Application Security Team protects the products and systems used by buyers and sellers daily. We partner with product and engineering to identify risks, resolve vulnerabilities, and build secure software across web and mobile applications.

As an Application Security Engineer, you will perform security-focused code reviews, work on threat modeling, reproduce and triage vulnerabilities, support the bug bounty program, and help develop reusable security tooling.