Application Security Engineer (Remote)

About the role

As an Application Security Engineer you will embed security into the software development lifecycle, partnering with engineering teams to protect web applications and APIs while maintaining development speed.

Key responsibilities

• Perform secure code reviews and architectural assessments to uncover threats.
• Run and manage static and dynamic analysis (SAST/DAST) pipelines.
• Lead threat‑modeling sessions using frameworks such as STRIDE.
• Integrate automated security testing into CI/CD pipelines.
• Mentor developers on secure coding practices and OWASP standards.
• Stay updated on emerging threats and recommend defensive strategies.

Required profile

• 4+ years of experience in application security, software engineering, or cybersecurity.
• Proven expertise in threat modeling and secure code review.
• Strong background in identifying and fixing vulnerabilities in web applications and APIs.
• Advanced proficiency in English.

Required skills

• Semgrep
• SonarQube
• Snyk
• OWASP ZAP
• STRIDE threat‑modeling framework
• OWASP Top 10 knowledge
• Static and dynamic analysis techniques
• Secure software development lifecycle (SDLC) practices

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Provided hardware and software for home office.
• Flexible schedule and self‑managed hours.
• Paid parental leave, vacation and national holidays.
• Multicultural environment with mentorship, promotions and skill‑development opportunities.