Senior Application Security Engineer - Remote

About the Role

We’re seeking a Senior Application Security Engineer to join our team remotely. In this role, you will embed security into how we design, build, and operate software, ensuring that security is a fundamental part of our engineering processes. You’ll collaborate closely with product and engineering teams to identify risks early and improve secure-by-design practices, continuously enhancing our application security posture.

What You’ll Do

• Embed security into the SDLC by integrating security activities across all phases: requirements, design, implementation, testing, deployment, and maintenance.
• Partner closely with engineering teams to ensure secure development practices are consistently applied.
• Review security controls for new features, services, and architectural changes.
• Run threat modeling sessions (e.g., STRIDE) for new and existing systems to identify threats and attack paths.
• Perform security-focused code reviews to identify vulnerabilities and provide actionable guidance on secure coding patterns.
• Conduct manual and automated web application security testing to identify injection flaws, authentication issues, and access control gaps.
• Support engineering teams during application security incidents, contributing to triage and root cause analysis.
• Enable engineers through training and documentation, creating secure coding guidelines and internal resources.

Requirements

• Strong understanding of secure software development principles and common vulnerability classes (OWASP Top 10, CWE).
• Experience working within modern SDLCs and agile development workflows.
• Hands-on experience with application security tools (SAST, DAST, SCA).
• Experience integrating security tooling into CI/CD pipelines.
• Ability to assess risk pragmatically and prioritize remediation.
• Understanding of cloud-native architectures, APIs, and microservices.
• Background working closely with product and engineering teams.

Nice to Have

• Exposure to security metrics, maturity models, or AppSec program building.

What We Offer

• Fully remote work with a work-from-anywhere scheme.
• Flexible working hours to suit your lifestyle.
• Health and life insurance program.
• Learning & development budget to enhance your skills.
• Join a tech-driven, friendly team with an international mindset.

If you feel you’re a great fit for this Senior Application Security Engineer remote position, please apply! We’d love to hear from you!