Application Security Engineer - Senior

remote work; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Relocation support to Kazakhstan,Spain

Flexible work from offices or remote

Healthcare Coverage

Education Budget

Wellness Budget

Vacation Policy

Job summary

Plata is seeking an Application Security Engineer to join the Information Security team. You will design, implement, and maintain robust security controls across the software development lifecycle, collaborating with development and security teams to embed security throughout design, development, testing, and deployment.

You will lead threat modeling, security reviews, and the adoption of SAST/DAST/IAST/RASP/SCA tools within CI/CD, driving proactive risk identification and remediation while

Qualifications

• Proficient in programming languages used for web and mobile apps.
• Strong understanding of web architectures (microservices) and secure design.
• Deep knowledge of OWASP Top10, threat modeling, and security testing frameworks.
• Familiarity with security tools such as ZAP, Dependency-Track, Burp.
• Excellent analytical skills with meticulous attention to detail.

Responsibilities

• Design, implement, and maintain robust application security controls.
• Embed security across the software development lifecycle from design to deployment.
• Collaborate with development and security teams to identify and mitigate risks.
• Lead security reviews, threat modeling, and risk identification.
• Help automate security through CI/CD pipelines.

Skills

Programming languages (web/mobile)

Web architectures (microservices)

OWASP Top10/threat modeling/security

Security testing frameworks

Attention to detail

Tools

ZAP

Burp Suite

Dependency-Track

Job description

We are looking for an Application Security Engineer to join our Information Security team.

The Information Security team is responsible for protecting Plata’s products, systems, and data by embedding security throughout the technology lifecycle. We work closely with engineering teams to identify and mitigate security risks, strengthen application defenses, and ensure security is integrated into every stage of software development.

As an Application Security Engineer, you will serve as a key link between development and security teams, designing, implementing, and maintaining robust application security controls. You’ll help embed security across the entire software development lifecycle — from design and development to testing and deployment — while continuously improving our application security practices.

Challenges that await you:

• Collaborate with Dev & Ops teams. Guide secure coding practices, participate in code reviews, and embed security seamlessly into the SDLC
• Conduct security reviews & threat modeling. Analyze application architecture, define threatmodels, and drive proactive risk identification
• Integrate security tools. Deploy and manage SAST, DAST, IAST, RASP, and SCA tools within CI/CD pipelines to automate early detection and remediation
• Handle security incidents
• Implement "shifting left" strategies, enforce continuous testing, fast remediation, and embed security culture across teams
• Educate and train. Conduct workshops to elevate developer security awareness and promote adherence to OWASP, ASVS, and secure design standards

What makes you a great fit:

• Proficient in programming languages (web/mobile)
• Strong understanding of web architectures (microservices)
• Deep knowledge of OWASP Top10, threat modeling, and security testing frameworks
• Familiarity with security tools such as ZAP, Dependency-Track, Burp
• Strong analytical skills with precise and thorough attention to detail

Your bonus skills:

• Security certifications (OSCP, OSWE, GWAPT, GCPN)
• Contributions to or experience with bug bounty or ethical-hacking programs
• SaaS or cloud-native environments experience
• Familiarity with Kubernetes or container security

Our ways of working:

• Innovative Spirit: A commitment to creativity and groundbreaking solutions
• Honest Feedback: valuing open, transparent communication
• Supportive Team: a strong, collaborative community
• Celebrating Achievements: recognizing our wins together
• High-Tech Environment: a team full of smart and revolutionary people who date to challenge the status quo of incumbent finances

Our benefits:

• Relocation support to Kazakhstan, Spain, Cyprus, Serbia or Georgia with full visa & permit support to the employee and family
• Flexible workfrom one of our offices or remote
• Healthcare Coverage
• Education Budget:Language lessons, professional training and certifications
• Wellness Budget: Mental health and fitness activity reimbursements
• Vacation Policy: Annual leave and paid sick leave as per applicable policies