Senior Application Security Engineer - Remote

TripleTen; Warszawa; Remote; PLN 196,000 - 294,000; Full time

Benefits offered by this job

Fully remote

Competitive compensation 4000-6000 EUR

Job summary

Nebius Academy, powered by TripleTen, seeks an Application Security Engineer to own product security end to end—from threat modelling and secure design reviews to vulnerability management and security controls embedded into CI/CD.

You will work closely with product and platform teams to embed security into the engineering process, building secure defaults and helping prevent vulnerabilities from reaching production without slowing development down.

Qualifications

• 5+ years in engineering with at least 2 years in Application Security or Product Security.
• Strong software engineering background with production code reading/writing; Python preferred.
• Deep knowledge of web app security including OWASP Top 10, OAuth2/OIDC, SAML and RBAC/ABAC.
• Experience securing multitenant/B2B SaaS; CI/CD security lifecycle experience.
• Strong communication; ability to explain risks to engineers, PMs and auditors.
• Fluent Russian and English at B2 level or above.

Responsibilities

• Own application and product security end to end from design reviews to remediation.
• Partner with product and platform teams to embed security into the development lifecycle.
• Build and improve security controls in CI/CD such as SAST, dependency, secrets, container and IaC scanning.
• Review designs and code to create secure defaults and CI gates.
• Drive vulnerability management including triage, prioritisation, and remediation timelines.
• Strengthen security in multitenant B2B systems with proper isolation and access controls.
• Work on AWS and Kubernetes security, IAM, secrets, network boundaries, and hardening.
• Translate GDPR, SOC 2, ISO 27001 requirements into practical controls.
• Develop and support a security champions programme for engineering teams.
• Address security risks in AI/LLM features, including prompt injection and data leakage.

Skills

Python

Security

Communication

English

Russian

Tools

SAST tools

SCA tools

CI/CD

Kubernetes

AWS

Job description

Nebius Academy, powered by TripleTen, seeks an Application Security Engineer to own product security end to end—from threat modelling and secure design reviews to vulnerability management and security controls embedded into CI/CD.

You will work closely with product and platform teams to embed security into the engineering process, building secure defaults and helping prevent vulnerabilities from reaching production without slowing development down.