Application Security Engineer: Secure Dev & AI Tools

Sitoo; Stockholms kommun; On-site; SEK 700,000 - 900,000; Full time

Job summary

Sitoo is a fast-growing technology company delivering the world's best Unified Commerce Platform and Point of Sale. Our technology is used in more than 20 countries, and we have no intention of slowing down.

As an Application Security Engineer, you will work closely with our CISO, Senior Security Engineer, and engineering teams to secure our platform and triage vulnerabilities across our GitHub repositories.

Qualifications

• Foundational knowledge of application security concepts and OWASP Top 10.
• Basic understanding of GitHub, repositories, and CI/CD pipelines.
• Proactive mindset with interest in modern AppSec practices.

Responsibilities

• Track, prioritize, and remediate application and dependency vulnerabilities across GitHub repositories.
• Assist development teams with code-level security updates across various tech stacks.
• Help investigate CI failures and breaking dependency upgrades caused by security updates.
• Track merged security fixes through release lifecycle to production.
• Improve repository security workflows, scans, and CI/CD gates.
• Help define guardrails for AI-assisted development tools in product engineering.
• Collaborate with Senior Cloud & Infrastructure Security Engineer on complex risks.

Skills

AppSec basics

Secure coding

GitHub

CI/CD

Vulnerability backlog

Tools

Dependabot

Aikido

Job description

Sitoo is a fast-growing technology company delivering the world's best Unified Commerce Platform and Point of Sale. Our technology is used in more than 20 countries, and we have no intention of slowing down.

As an Application Security Engineer, you will work closely with our CISO, Senior Security Engineer, and engineering teams to secure our platform and triage vulnerabilities across our GitHub repositories.