Application Security Engineer (Remote)

About the role

As an Application Security Engineer you will embed security into every stage of the software development lifecycle, partnering with engineering teams to protect web applications and APIs while maintaining delivery speed.

Key responsibilities

• Conduct secure code reviews and architectural assessments to uncover threats.
• Run and manage static and dynamic analysis (SAST/DAST) pipelines.
• Lead threat‑modeling sessions using frameworks such as STRIDE.
• Integrate automated security testing into CI/CD pipelines.
• Mentor developers on secure coding practices and OWASP standards.
• Monitor emerging threats and recommend defensive strategies.

Required profile

• 4+ years of experience in Application Security, Software Engineering, or Cybersecurity.
• Proven expertise in application‑layer security, threat modeling, and secure code review.
• Strong understanding of the OWASP Top 10 and secure SDLC practices.
• Advanced proficiency in English.

Required skills

• Semgrep
• SonarQube
• Snyk
• OWASP ZAP
• STRIDE threat‑modeling framework
• OWASP Top 10 knowledge

What we offer

• 100% remote work from anywhere.
• Competitive compensation in USD or local currency.
• Provided hardware and software for home office.
• Flexible schedule and paid parental leave, vacations, and holidays.
• Mentorship, skill development, and growth opportunities within a multicultural global team.