Application Security Engineer
$382,800–$435,000 year
HybridWarsaw, Mazovia, Poland
Job Summary
Conduct security architecture reviews, threat modeling, and vulnerability assessments across product and internal applications to eliminate systemic risks. Triage bug bounty findings and automated tooling alerts, driving remediation within defined SLAs. Investigate security incidents using logs and monitoring tools to assess scope, impact, and root cause. Develop training on secure coding best practices and emerging threats for engineering teams. Collaborate with IT, infrastructure, and product stakeholders to influence roadmap decisions and foster a security-first mindset. Maintain awareness of industry trends to ensure the security posture remains robust against evolving threats.
Required Qualifications
- 5+ years of experience in application security, product security, or software engineering with a security focus
- significant experience in security design reviews, threat modeling, and vulnerability assessments
- Strong software engineering background with experience in languages like Python, JavaScript/TypeScript or Scala
- Deep working knowledge of the OWASP Top 10 and common web application vulnerabilities such as XSS, CSRF, SSRF, and SQL injection
- Experience with security tools for static/dynamic analysis (SAST/DAST), software composition analysis (SCA), and vulnerability management
- Proven experience performing security design reviews and threat modeling for complex, distributed applications
- ability to identify systemic risk and drive remediation at scale
- Excellent communication skills for collaborating effectively with both technical and non-technical partners
- A pragmatic and collaborative mindset
- passion for building defenses into the software development lifecycle
- willingness to learn and leverage AI tools and emerging technologies to enhance productivity, collaboration, or decision-making
- Contract of Employment (UoP) for our employees in Poland
Desired Qualifications
- Demonstrates curiosity about AI tools and emerging technologies
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.