Senior Application Security Engineer - Remote & Flexible

remote work; EUA; Teletrabalho; USD 120 000 - 180 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Relocation support to Kazakhstan,Spain

Flexible work from offices or remote

Healthcare Coverage

Education Budget

Wellness Budget

Vacation Policy

Resumo da oferta

Plata is seeking an Application Security Engineer to join the Information Security team. You will design, implement, and maintain robust security controls across the software development lifecycle, collaborating with development and security teams to embed security throughout design, development, testing, and deployment.

You will lead threat modeling, security reviews, and the adoption of SAST/DAST/IAST/RASP/SCA tools within CI/CD, driving proactive risk identification and remediation while

Qualificações

• Proficient in programming languages used for web and mobile apps.
• Strong understanding of web architectures (microservices) and secure design.
• Deep knowledge of OWASP Top10, threat modeling, and security testing frameworks.
• Familiarity with security tools such as ZAP, Dependency-Track, Burp.
• Excellent analytical skills with meticulous attention to detail.

Responsabilidades

• Design, implement, and maintain robust application security controls.
• Embed security across the software development lifecycle from design to deployment.
• Collaborate with development and security teams to identify and mitigate risks.
• Lead security reviews, threat modeling, and risk identification.
• Help automate security through CI/CD pipelines.

Conhecimentos

Programming languages (web/mobile)

Web architectures (microservices)

OWASP Top10/threat modeling/security

Security testing frameworks

Attention to detail

Ferramentas

ZAP

Burp Suite

Dependency-Track

Descrição da oferta de emprego

Plata is seeking an Application Security Engineer to join the Information Security team. You will design, implement, and maintain robust security controls across the software development lifecycle, collaborating with development and security teams to embed security throughout design, development, testing, and deployment.

You will lead threat modeling, security reviews, and the adoption of SAST/DAST/IAST/RASP/SCA tools within CI/CD, driving proactive risk identification and remediation while