Application Security Engineer – Mid-Senior

This is a fully remote position, open to applicants in Poland.

📋 Description

• Execute security evaluations of application designs, source code, and external libraries.

• Conduct application vulnerability assessments utilizing both automated tools and manual testing methods, encompassing SAST, DAST, SCA, and penetration testing.

• Partner with development teams to architect secure systems and apply security measures.

• Manage security tools, scripts, and procedures that facilitate secure development practices.

• Keep abreast of industry trends, zero-day vulnerabilities, and best practices in application security.

• Create scripts and security-automation tools to enhance application security testing.

• Design and provide security engineering awareness training.

• Identify internal security deficiencies throughout the product and the organization.

• Evaluate mobile and desktop applications while assisting with internal and external audits.

⛳️ Requirements

• Demonstrated experience in planning, testing, and reporting for mobile/desktop application security assessments.

• Comprehensive knowledge of secure coding practices.

• Capability to conduct manual security code reviews.

• Proficiency in at least one low-level programming language, such as C, C++, Rust, or Go.

• Strong grasp of TCP, UDP, and HTTP networking protocols.

• Familiarity with debuggers like GDB, LLDB, or WinDbg.

• Experience with reverse engineering tools such as Ghidra or IDA.

• Solid understanding of memory corruption issues, buffer overflows, and related classes of vulnerabilities.

• Knowledge of authentication and authorization protocols including OAuth, SAML, and JWT.

• Proficient in using Wireshark and tcpdump.

• Quick to adapt to new technologies and tools.

• Strong analytical and investigative abilities.

• Skilled at building and nurturing relationships while influencing key stakeholders.

• Bonus points for community contributions such as public CVEs, bug bounty acknowledgments, open-source tools, or blogs.

🏝️ Benefits

• Training, mentorship, and opportunities for advancement.

• Additional vacation days, sick leave, and time off as needed.

• Comprehensive private health insurance in Lithuania and Poland — fully covered.

• Complimentary subscriptions to Calm, Headspace, and Mindletic.

• Resilience and mindfulness training programs.

• Access to in-house gyms, sport cards, online workouts, and personal coaching.

• Company-wide trips abroad.

• Flexible work arrangements to suit your productivity.

• Gifts for birthdays, weddings, and new family additions.

• Children’s summer camps and adaptable scheduling.

• Team-building activities and company events.

• Access to Vilnius HQ facilities including a coffee bar, open gyms, kids’ room, music room, and massage chairs.