Senior Application Security Engineer

Tangem AG; Indiana; On-site; CHF 64,498 - 82,926; Full time

Benefits offered by this job

Unlimited vacation

Competitive salary in EURO/USDT

Compensation for necessary technical devices

Job summary

Tangem AG is looking for a Senior Application Security Engineer to enhance the security of its products. You will be responsible for identifying security issues in web applications, backend services, and APIs through both manual and automated testing techniques.

Ideal candidates should have over 3 years of experience in Application Security, solid practice in finding vulnerabilities, and familiarity with Cloudflare security products. The position offers flexible remote work options and unlimited vacation.

Qualifications

• 3+ years of experience in Application Security or similar role.
• Practical experience finding vulnerabilities in web applications and APIs.
• Experience using Cloudflare security products or similar technologies.

Responsibilities

• Test web applications and APIs for security vulnerabilities.
• Review new features to identify security risks.
• Manage application security tools.

Skills

Application Security

Penetration Testing

Offensive Security

Vulnerability Scanners

Cloudflare security products

Tools

DAST tools

WAF

API Shield

Job description

About the role

We're looking for a Senior Application Security Engineer to help keep Tangem's products secure.

You'll focus on finding security issues in our web applications, backend services, and APIs before attackers do. You'll work closely with developers, review new features from a security perspective, validate bug bounty reports, and help improve our overall security posture.

This is a hands on role for someone who enjoys both offensive security and working with engineering teams to build secure products.

What you'll do

• Test web applications and APIs for security vulnerabilities using both manual and automated approaches.
• Review new features and services before and after release to identify security risks.
• Manage and tune application security tools such as WAF, API Firewall, Cloudflare, and similar solutions.
• Investigate and validate bug bounty submissions.
• Work with developers and QA engineers to improve security testing practices.
• Deliver practical security training and guidance to engineering teams.

What we're looking for

• 3+ years of experience in Application Security, Penetration Testing, Offensive Security, or a similar role.
• Practical experience finding vulnerabilities in web applications and APIs.
• Experience with Cloudflare security products (WAF, API Shield, etc.) or similar technologies.
• Experience using vulnerability scanners, DAST tools, and other security testing solutions.

Nice to have

• Experience participating in bug bounty programs (HackerOne, Bugcrowd, Google VRP, etc.).
• CTF participation or other practical offensive security activities.
• Security certifications such as OSCP, PNPT, eWPT, or similar.
• Experience integrating security testing into CI/CD pipelines.

Success Metrics

• Reduction of critical and high risk application security findings.
• Increased security coverage of applications, APIs, and release processes through reviews, testing, and protection controls.
• Timely and effective handling of security incidents, bug bounty reports, and engineering security requests.

What we offer

• Stability, growth, participation in shaping the future unicorn.
• Remote work from any location.
• Competitive salary in EURO/USDT.
• Unlimited vacation.
• Compensation for the purchase of necessary technical devices for the work.