Senior AppSec Engineer: Secure SDLC & Pen Tests

DOU; Wrocław; On-site; PLN 180,000 - 260,000; Full time

Benefits offered by this job

Annual leave

Private medical cover

Private medical insurance

Learning Hub

Gym & fitness membership

Multisport membership

Job summary

ARRISE is seeking a Senior Application Security Engineer to act as a technical authority for secure design, development, deployment, and integrity across on-prem and SaaS environments. You will thrive in a fast-paced, collaborative setting and wear multiple hats.

You will define and mature secure SDLC, embed secure coding practices, lead threat modeling, and implement security testing in CI/CD. Strong background in web/API security and penetration testing is required.

Qualifications

• 5+ years in application security, secure architecture, or related functions.
• Proven ability to influence senior engineering and product leadership.
• Proven implementation of CI/CD security automation and secure coding practices.
• Strong understanding of web, API, and microservice security.
• Experience with Java, JavaScript.
• Experience in Penetration Testing.

Responsibilities

• Define and mature secure SDLC and AppSec program frameworks.
• Embed secure coding practices into development and backend platform engineering.
• Lead threat modeling and high-risk security reviews for major releases.
• Implement application security testing tools (e.g. SCA, SAST/DAST), container scanning, and secrets detection in CI/CD pipelines.
• Perform penetration testing and manage external testing efforts.
• Manage application vulnerabilities from identification to remediation.
• Provide guidance for development teams.
• Design and enforce organization-wide paved roads and guardrails.

Skills

Application security

Secure architecture

CI/CD security automation

Web security

API security

Penetration testing

Java

JavaScript

Kubernetes security

Tools

CI/CD tools

SAST/DAST tools

Job description

ARRISE is seeking a Senior Application Security Engineer to act as a technical authority for secure design, development, deployment, and integrity across on-prem and SaaS environments. You will thrive in a fast-paced, collaborative setting and wear multiple hats.

You will define and mature secure SDLC, embed secure coding practices, lead threat modeling, and implement security testing in CI/CD. Strong background in web/API security and penetration testing is required.