Application Security Engineer - Central Europe

Zoolatech; Central (LA); On-site; USD 120,000 - 180,000; Full time

Job summary

Zoolatech in collaboration with a leading European Online Fashion & Beauty Retailer seeks an experienced Application Security Engineer to secure modern cloud-native applications. You will drive threat modeling, architecture reviews, and secure design decisions across engineering teams.

You’ll validate AI-assisted threat modeling, recommend mitigations, and ensure robust API/authentication security. Familiarity with OWASP Top 10 for Web Apps and LLMs is a plus.

Qualifications

• 5–10 years of professional experience in Application Security.
• Hands-on threat modeling using STRIDE or similar methodologies.
• Experience reviewing AI-assisted threat modeling outputs.
• Security architecture and design review expertise.
• Strong knowledge of OWASP Top 10 for Web Apps and REST API security.
• Experience with OAuth 2.0/2.1, OpenID Connect, JWT/JWS/JWE, mTLS, SAML.

Responsibilities

• Conduct structured threat modeling for web and other apps using STRIDE.
• Review AI-assisted threat modeling outputs and close gaps with actionable guidance.
• Perform security architecture reviews to surface risks early.
• Recommend secure design patterns and practical mitigations.
• Assess authentication, API security, tokens, and secrets handling.
• Collaborate with engineers to embed security into design and dev work.
• Provide developer-friendly guidance on security controls and remediation.
• Evaluate security risks in AI/LLM-based apps and architectures.
• Apply OWASP standards and best practices for web and LLM security.

Skills

Threat modeling

OWASP Top 10

Cloud security

OAuth 2.0

JWT/JWS/JWE

RBAC/ABAC

Open Policy Agent

Rego

Tools

Open Policy Agent (OPA)

Rego

Cedar

Job description

Zoolatech in collaboration with a leading European Online Fashion & Beauty Retailer seeks an experienced Application Security Engineer to secure modern cloud-native applications. You will drive threat modeling, architecture reviews, and secure design decisions across engineering teams.

You’ll validate AI-assisted threat modeling, recommend mitigations, and ensure robust API/authentication security. Familiarity with OWASP Top 10 for Web Apps and LLMs is a plus.