Application Security Engineer (Remote)

About the role

We are looking for an Application Security Engineer to join our fully remote team. You will be responsible for identifying and mitigating security vulnerabilities across our software applications and embedding security best‑practice throughout the development lifecycle.

Key responsibilities

• Perform comprehensive secure code reviews and architectural assessments to uncover potential threats.
• Execute and manage static and dynamic analysis (SAST/DAST) to proactively detect vulnerabilities.
• Provide guidance and coaching to developers on secure coding practices and OWASP standards.
• Design and integrate automated security testing into CI/CD pipelines.
• Collaborate with engineering teams to prioritize and remediate security findings efficiently.
• Stay up‑to‑date with emerging threats and recommend robust defense strategies.

Required profile

• Minimum 4 years of experience in application security, cyber security, or software engineering.
• Proven track record of finding and fixing vulnerabilities using SAST and DAST tools.
• Strong experience conducting secure code reviews and applying OWASP best practices.
• Hands‑on experience coaching development teams on secure coding standards.
• Deep understanding of the software development lifecycle and security automation.
• Advanced proficiency in English.

Required skills

• SAST
• DAST
• OWASP standards
• Secure code review
• CI/CD pipeline integration

What we offer

• 100 % remote work from anywhere.
• Competitive compensation in USD or local currency.
• Provided hardware and software for home office.
• Flexible schedule and paid parental leave, vacations, and holidays.
• Mentorship, skill development, and growth opportunities within a multicultural global team.