Remote Application Security Engineer (DevSecOps SaaS)

TripleTen; Lisboa; Remote; EUR 45,000 - 67,000; Full time

Benefits offered by this job

Fully remote

Job summary

Nebius Academy is seeking an Application Security Engineer to own security end to end for our products, from threat modelling to vulnerability remediation. This remote, full-time role partners with product and platform teams to embed security into the development lifecycle and to build secure defaults across CI/CD.

The ideal candidate has 5+ years of engineering experience with at least 2 in application security, strong Python skills, and deep knowledge of AWS, Kubernetes, OAuth2/OIDC, and

Qualifications

• 5+ years of engineering experience with at least 2 years in Application Security.
• Strong Python development and code review skills.
• Deep knowledge of OWASP Top 10, ASVS, OAuth/OIDC, SAML, and access controls.
• Experience securing multitenant or B2B SaaS products with RBAC/ABAC.
• Hands-on CI/CD security including SAST, SCA, secrets scanning, and IaC scanning.
• Proven ability to communicate risk to engineers, PMs, and auditors.
• Experience with AWS and Kubernetes security.

Responsibilities

• Own application and product security end to end from design reviews to remediation.
• Embed security into the development lifecycle with secure defaults.
• Build and improve CI/CD security controls across SAST, SCA, and secrets.
• Review designs and code to turn findings into secure libraries and CI gates.
• Drive vulnerability management including triage and remediation timelines.
• Strengthen security in multitenant B2B systems with proper access controls.
• Address security risks in AI/LLM features, including data leakage and prompt injection.
• Translate GDPR, SOC 2, ISO 27001 requirements into engineering controls.

Skills

Python

Threat modelling

Secure code reviews

CI/CD security

Cloud security (AWS)

Kubernetes security

Security communications

Multitenant/B2B SaaS security

Tools

AWS

Kubernetes

SAST

SCA

IaC scanning

Container scanning

Job description

Nebius Academy is seeking an Application Security Engineer to own security end to end for our products, from threat modelling to vulnerability remediation. This remote, full-time role partners with product and platform teams to embed security into the development lifecycle and to build secure defaults across CI/CD.

The ideal candidate has 5+ years of engineering experience with at least 2 in application security, strong Python skills, and deep knowledge of AWS, Kubernetes, OAuth2/OIDC, and