4 дня назад
Security Engineer (Application Security)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Security Engineer (Application Security) (SAST/DAST/SCA): Integrating application security controls, automation, and tooling into CI/CD pipelines and Git-based workflows with an accent on software supply-chain protection and scalable DevSecOps practices. Focus on developing security automation, analyzing and remediating vulnerabilities, standardizing secure coding practices, and tracking AppSec maturity metrics.
Location: Prague, Czech Republic; primarily in-office work from the Prague office is required
Company
is a publicly listed data platform company serving hyperscalers, AI labs, the AI hardware supply chain, data platform providers, and the broader AI ecosystem.
What you will do
- Implement and integrate SAST, DAST, SCA, and secrets-scanning controls into CI/CD pipelines and Git-based workflows.
- Build and maintain scalable automation scripts that streamline security checks and improve adoption across engineering platforms.
- Analyze security issues and guide development teams in identifying, troubleshooting, and remediating vulnerabilities.
- Standardize secure coding practices and track application security metrics across global secure development operations.
- Collaborate with development, platform, and security teams to embed security into the software development lifecycle.
Requirements
- Strong knowledge of application security, the OWASP Top 10, web applications, APIs, and secure development practices.
- Proficiency in scripting or programming, such as Python.
- Hands-on experience with CI/CD pipelines and Git-based workflows.
- Ability to independently solve moderately complex technical security challenges.
- Strong communication and collaboration skills for working with diverse engineering teams.
- Expected to work from the Prague office unless on approved leave, PTO, or work travel.
Culture & Benefits
- Innovation-focused environment that encourages critical thinking and challenging technical work.
- Growth and development support with opportunities to contribute to meaningful technology initiatives.
- Collaborative culture centered on teamwork and shared outcomes.
- Flexible time off, wellness resources, and company-sponsored team events.
- Inclusive workplace with employee resource groups and a commitment to inclusive leadership.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →