Application Security Engineer – Remote

About the role

We are looking for an Application Security Engineer to identify and mitigate security vulnerabilities across our software applications. You will work remotely, collaborating with development teams to embed security throughout the software development lifecycle.

Key responsibilities

• Perform secure code reviews and architectural assessments to uncover potential threats.
• Execute and manage static and dynamic analysis (SAST/DAST) to detect vulnerabilities.
• Provide guidance and coaching to developers on secure coding practices and OWASP standards.
• Design and integrate automated security testing into CI/CD pipelines.
• Collaborate with engineering teams to prioritize and remediate security findings.
• Stay updated on emerging threats and recommend robust defense strategies.

Required profile

• 4+ years of experience in Application Security, Cyber Security, or Software Engineering.
• Proven track record using SAST and DAST tools to find and fix vulnerabilities.
• Strong experience conducting secure code reviews and applying OWASP best practices.
• Hands‑on experience coaching development teams on secure coding standards.
• Deep understanding of the software development lifecycle and security automation.
• Advanced proficiency in English.

Required skills

• SAST (static application security testing)
• DAST (dynamic application security testing)
• OWASP security standards
• Secure code review techniques
• CI/CD pipeline security automation

What we offer

• 100 % remote work from anywhere.
• Competitive compensation in USD or local currency.
• Provided hardware and software for home office.
• Flexible schedule – create your own working hours.
• Paid parental leave, vacations, and national holidays.
• Multicultural environment with mentorship, promotions, and skill development opportunities.