Senior Application Security Engineer Remote SDLC Ownership

LT Harper Group; Polska; Remoto; PLN 180.000 - 240.000; Tempo pieno

Vantaggi offerti da questo lavoro

Private medical insurance

Healthcare cashback scheme

4x salary life assurance

Unlimited annual holiday

Enhanced family leave

Work abroad for up to 6 weeks a year

Learning and development budget

Descrizione del lavoro

LT Harper Group in Poland (remote) is seeking a Senior Application Security Engineer to own security across the software development lifecycle, including the Ox Security ASPM platform, and drive fixes that ship. You'll join a small Information Security team spanning London and Poland at an enterprise SaaS company serving major global banks.

You’ll build CI/CD guardrails, tune security findings, lead threat modelling, and strengthen supply chain security with SBOMs and IaC practices, reporting to

Competenze

• Experience in application security, product security or DevSecOps, ideally in SaaS.
• Hands-on integration of security tooling into CI/CD pipelines.
• Track record turning SAST, SCA, secrets findings into prioritized remediations.
• Strong understanding of the OWASP Top 10 and remediation approaches.
• Ability to read and review code in Java, Ruby or Python.
• Experience running threat modelling with engineering teams, plus AWS and IaC knowledge.

Mansioni

• Build and maintain CI/CD guardrails: SAST, SCA, secrets scanning, and IaC and container image scanning, with gating agreed with Engineering
• Tune Ox Security to cut noise and prioritise findings by reachability and exploitability
• Agree remediation SLAs with engineering leads and report clearly on progress
• Lead threat modelling and secure design reviews, and review high-risk code changes
• Strengthen supply chain security through SBOMs, dependency hygiene and build provenance
• Represent platform security in client security reviews and due diligence

Conoscenze

Application security

DevSecOps

CI/CD tooling

Threat modelling

OWASP Top 10

Code review: Java/Ruby/Python

AWS & IaC

SBOMs

ASPM platform

SAST/SCA

Strumenti

Ox Security

Descrizione del lavoro

LT Harper Group in Poland (remote) is seeking a Senior Application Security Engineer to own security across the software development lifecycle, including the Ox Security ASPM platform, and drive fixes that ship. You'll join a small Information Security team spanning London and Poland at an enterprise SaaS company serving major global banks.

You’ll build CI/CD guardrails, tune security findings, lead threat modelling, and strengthen supply chain security with SBOMs and IaC practices, reporting to