Application Security Engineer: Secure Dev & AI Tools

Sitoo Kassasystem; Stockholms kommun; On-site; SEK 700,000 - 900,000; Full time

Benefits offered by this job

30 days vacation

5,000 SEK wellness benefit

Gym membership discount

Parental leave top-up

Occupational pension

Fika every Thursday

AW on Fridays

And more!

Job summary

Sitoo is seeking an Application Security Engineer to support secure development across the platform. You will own the application-level vulnerability backlog, triage fixes, and ensure code changes are released in line with SOC 2 SLA targets.

You will partner with CI/CD pipelines and AI-assisted development tools to empower teams while maintaining strong security practices. You will work closely with CISO and Senior Security Engineers to triage findings, update dependencies, and help build robust

Qualifications

• Foundational knowledge of application security concepts, secure coding practices, and common vulnerabilities (OWASP Top 10).
• Familiarity with at least one programming language (Python, Go, Ruby, or JavaScript/TypeScript).
• Basic understanding of version control (GitHub), repository management, and CI/CD pipelines.
• A proactive, problem-solving mindset with a genuine enthusiasm for clearing security technical debt.
• Interest in AI-assisted development and awareness of AI-related code security risks.
• Confident, clear communication skills to collaborate across development teams.
• Professional English, both verbal and written.

Responsibilities

• Actively track, prioritize, and remediate application and dependency vulnerabilities (Dependabot, Aikido) across ~184 active GitHub repositories to hit SOC 2 SLA targets.
• Assist development teams with code-level security updates across npm, pnpm, Go, Ruby, Python, Dockerfiles, and GitHub Actions.
• Help investigate and resolve breaking dependency upgrades, CI failures, and build issues caused by security updates.
• Track merged security fixes through the release lifecycle to ensure they are deployed and validated in production.
• Contribute to improving repository-level security workflows, automated scanning, and CI/CD security gates.
• Learn, help define, and monitor security guardrails for the safe use of AI-assisted development tools in product engineering.
• Collaborate closely with our Senior Cloud & Infrastructure Security Engineer on escalation of complex code or architectural risks.

Skills

Application security concepts

Secure coding practices

OWASP Top 10

Programming languages

GitHub

CI/CD pipelines

Security debt management

AI-assisted development awareness

Communication skills

English proficiency

Tools

GitHub

Dependabot

Aikido

CI/CD tooling

Job description

Sitoo is seeking an Application Security Engineer to support secure development across the platform. You will own the application-level vulnerability backlog, triage fixes, and ensure code changes are released in line with SOC 2 SLA targets.

You will partner with CI/CD pipelines and AI-assisted development tools to empower teams while maintaining strong security practices. You will work closely with CISO and Senior Security Engineers to triage findings, update dependencies, and help build robust