Application Security Engineer

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Establish security requirements and develop application architectures with a *secure-by-default* mindset.

• Execute threat modeling, code assessments, and penetration tests on cloud-based web and mobile applications to proactively spot vulnerabilities.

• Apply, oversee, and automate SAST/DAST/SCA security measures and WAF rules to ensure scalable protection.

• Collaborate with Product teams to guarantee strong protection and promote a security-first culture in development.

• Engage in the investigation, management, and resolution of security alerts.

• Work together on all essential activities and initiatives within the Security Engineering team.

⛳️ Requirements

• Deep understanding of web/mobile security vulnerabilities, AI security threats, and industry benchmarks (e.g., OWASP Top 10, CWE).

• Practical experience with threat modeling frameworks (e.g., STRIDE), code reviews, penetration testing, and SAST/DAST/SCA tools.

• Skilled in scripting/programming (e.g., Python, Rust) and familiar with CI/CD systems and Infrastructure as Code (e.g., Pulumi).

• Willingness to be available for on-call shifts to ensure 24x7 security monitoring and assistance.

• Self-driven and proactive problem solvers with excellent English communication abilities and experience in Agile settings.

🏝️ Benefits

• Complete flexibility – work from home, in the office, or a combination of both.

• Opportunity to work from any location for up to 30 days each year.

• Access to educational resources, mentorship, and a personalized growth plan.

• Private healthcare, gym discounts, wellness programs, and support for mental health.