Application Security Engineer

This is a remote position.

• 2+ years of experience in the information security field;
  
• 1+ year of experience in application security and/or DevSecOps;
  
• Knowledge of secure development processes and best practices;
  
• Web application security knowledge (SOP/CSP) and web application vulnerabilities;
  
• Knowledge of secure system/application architecture and design principles;
  
• Experience in Computer Science/Information Security or related field
  
• Fluent English;
  

• Technical knowledge of network and operating systems security;
  
• Bug bounty programs and/or CTFs;
  
• SAST/DAST tools, including customization;
  
• Relevant certifications (OSWE, GWEB).
  

• Plan, design, implement, automate and support AppSec tools;
  
• Participate in designing and establishing a company-wide application security program from scratch;
  
• Perform security assessments;
  
• Triage security vulnerabilities and help to make sure they are properly addressed;
  
• Consult, share expertise and risk analysis to Dev/QA teams on all steps of the development lifecycle.
  

• Remote, in-office, or hybrid you choose how you want to work;
  
• Extended relocation package and company support;
  
• Sports program compensation;
  
• Extended medical insurance coverage;
  
• Company hardware and additional equipment provided;
  
• Free English classes;
  
• 4 paid sick days, 1 day off and 20+ days vacation;
  
• Employee referral program;
  
• Paid training programs, certifications, and conferences, including international events.