Staff Application Security Engineer — Remote & AI-Driven Security

Jobgether; Turkey; A distancia; TRY 8.767.000 - 11.887.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Fully remote

Descripción de la vacante

Jobgether in Turkey seeks a Staff Application Security Engineer to build and scale an internal security function in a high-growth tech environment. You will combine software engineering with security expertise to identify vulnerabilities, strengthen development workflows, and drive remediation across APIs, SDKs, and cloud systems.

You will lead threat modeling, security reviews, and integration of AI-powered tools while maintaining rigorous quality standards.

Formación

• At least 8 years of software or security engineering experience, with 5+ years in application security.
• Experience building or improving application security programs within product engineering.
• Strong production-quality coding skills in TypeScript/JavaScript/Go/Python or similar.

Responsabilidades

• Design and implement secure SDLC with threat modeling, secure code reviews, and pre-release testing.
• Own SAST/DAST, SCA, dependency scanning, secrets detection, and container/IaC scanning.
• Integrate security tooling into CI/CD, define ownership and remediation SLAs.
• Develop an AI-first security engineering approach for automated remediation and testing.
• Lead threat modeling and architecture reviews across APIs, web/mobile SDKs, dashboards, and data pipelines.
• Manage vulnerability identification, risk assessment, prioritization, and remediation.
• Conduct hands-on security testing including manual code reviews and exploitation testing.
• Collaborate with penetration testers and compliance to scope assessments and fixes.

Descripción del empleo

Jobgether in Turkey seeks a Staff Application Security Engineer to build and scale an internal security function in a high-growth tech environment. You will combine software engineering with security expertise to identify vulnerabilities, strengthen development workflows, and drive remediation across APIs, SDKs, and cloud systems.

You will lead threat modeling, security reviews, and integration of AI-powered tools while maintaining rigorous quality standards.