Senior Application Security Engineer: AI‑Driven Security & CI/CD

Socket.dev; Belgrade (MT); On-site; USD 120,000 - 180,000; Full time

Job summary

Unlimit, a global fintech ecosystem, seeks a Senior Application Security Engineer to harden applications, APIs, and CI/CD processes. You’ll automate testing, model threats, and integrate security into development across teams.

You’ll lead secure design reviews, code analysis, and vulnerability remediation, while advancing ASMP and AI‑assisted security workflows in a fast‑growing, AI‑driven infrastructure.

Qualifications

• 5+ years in Application Security, Software Security, DevSecOps, or Software Engineering with a security focus.
• Experience in fintech or crypto is a plus; strong software development background.
• Threat modelling, secure design reviews, and manual code reviews experience.
• Secure SDLC, CI/CD security, and automated security testing in pipelines.

Responsibilities

• Drive secure software development practices across the organisation.
• Perform application security assessments, design reviews, and threat modelling.
• Conduct manual source code reviews for critical apps and remediation.
• Integrate security testing (SAST/DAST/SCA/API) into SDLC and IaC security.
• Build automated security workflows in GitLab CI/CD and ASPM capabilities.
• Collaborate with engineering to remediate vulnerabilities and improve resilience.
• Coordinate external assessments and drive remediation from findings.
• Develop AI-powered security workflows, reviews, and code analysis patterns.

Skills

DevSecOps

Threat modelling

Secure SDLC

CI/CD security

SAST

DAST

SCA

API security

GitLab workflows

Automation

AI-assisted security

Java

Go

Python

Node.js

PHP

Dart (Flutter)

Tools

GitLab CI/CD

Job description

Unlimit, a global fintech ecosystem, seeks a Senior Application Security Engineer to harden applications, APIs, and CI/CD processes. You’ll automate testing, model threats, and integrate security into development across teams.

You’ll lead secure design reviews, code analysis, and vulnerability remediation, while advancing ASMP and AI‑assisted security workflows in a fast‑growing, AI‑driven infrastructure.