Remote AppSec Engineer - Secure Coding & Reviews

Camunda; United States; Remote; GBP 75,000 - 124,000; Full time

Benefits offered by this job

Remote work

Flexible time off

Learning budget

Health benefits

Team offsites

Job summary

Camunda is hiring an Information Security Engineer focused on Application Security to join our Security team. We prioritize practical security work, transparency, and clear communication with engineers to enable secure delivery at scale.

You will engage in vulnerability triage, threat modeling, and code analysis using LLM-assisted tooling. The role includes building internal security tooling and contributing to security advisories for customers, with remote-global collaboration.

Qualifications

• 3+ years in security or software engineering, with at least 2 in app security.
• Experience at a SaaS or software product company with CI/CD and cloud environments.
• Hands-on vulnerability triage with Snyk, Trivy, Semgrep, CodeQL or similar.
• Threat modeling and design review experience (STRIDE) on real systems.
• Read and write code; comfortable with Java; able to write scripts.
• Experience with AI coding agents in daily work.

Responsibilities

• Vulnerability management: triage findings from SCA, container and code scanning; assess exposure; coordinate fixes with engineering.
• Threat modeling and security reviews for new features and architecture changes.
• Code analysis with LLMs to review code and reproduce issues.
• Build internal security tooling and contribute to CVE registries and automation.
• Support engineers by answering questions, reviewing PRs, and conducting workshops.
• On-call and incident response; investigate and help resolve security incidents.
• Create security advisories for customers and support audits.

Skills

AppSec

Vulnerability triage

Threat modeling

Code reading

AI tooling

Security reviews

CI/CD

Java

Tools

Snyk

Trivy

Semgrep

CodeQL

LLM tooling

Job description

Camunda is hiring an Information Security Engineer focused on Application Security to join our Security team. We prioritize practical security work, transparency, and clear communication with engineers to enable secure delivery at scale.

You will engage in vulnerability triage, threat modeling, and code analysis using LLM-assisted tooling. The role includes building internal security tooling and contributing to security advisories for customers, with remote-global collaboration.