Senior Application Security Engineer — Remote & Hybrid

Pepperstone; Hungary (CT); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Competitive salary

Company bonus scheme

Collaborative and friendly culture

Hybrid working

Remote work up to 4 weeks/year

Job summary

Pepperstone is seeking an experienced Application Security Engineer to embed security across the software development lifecycle. You will partner with engineering and product teams to identify, assess, and remediate vulnerabilities in applications and APIs, driving secure coding practices and security-aware culture.

You will lead security assessments, integrate controls into CI/CD pipelines, and mentor engineers while coordinating bug bounty programs.

Qualifications

• 8+ years of information security experience with 3+ years in application/software security engineering.
• Solid understanding of OWASP Top 10, business logic flaws and API security risks.
• Hands-on with security testing tools (Burp Suite, OWASP ZAP, Semgrep, Checkmarx, Snyk).
• Proficiency in at least one language (Python/JavaScript/Java/Go) for code review/automation.
• Experience integrating security tooling into CI/CD (GitHub Actions/Jenkins/GitLab CI).
• Familiarity with AWS/Azure/GCP cloud security principles for app hosting/deployment.
• Fluency in English; Hungarian a plus.
• Certifications such as OSCP, GWEB, CEH are advantageous.

Responsibilities

• Perform application security assessments across web, mobile, and API surfaces.
• Integrate security controls into CI/CD pipelines using SAST/DAST/SCAs and secrets tooling.
• Identify, triage, and remediate vulnerabilities with engineering teams.
• Define and maintain application security standards and developer-facing docs.
• Champion secure-by-design principles during design/architecture phases.
• Lead bug bounty and responsible disclosure programmes and triage issues.
• Conduct security training and awareness sessions for engineers.
• Evaluate third-party libraries and vendor integrations for security risk.
• Collaborate with Security team on incident response for app-layer vulnerabilities.

Skills

Information security

Application security

Communication skills

English fluency

Tools

Burp Suite

OWASP ZAP

Semgrep

Checkmarx

Snyk

Job description

Pepperstone is seeking an experienced Application Security Engineer to embed security across the software development lifecycle. You will partner with engineering and product teams to identify, assess, and remediate vulnerabilities in applications and APIs, driving secure coding practices and security-aware culture.

You will lead security assessments, integrate controls into CI/CD pipelines, and mentor engineers while coordinating bug bounty programs.