Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
Мало
€70к-87к/год
€63к€84кмедиана€110к
По похожим ролям (21) ~ €84к/год
75
Хорошая вакансия
развернуть
Роль четко описана в известной продуктовой компании в сфере кибербезопасности, но зарплата ниже ориентира платформы для похожих senior-позиций, что снижает привлекательность предложения.
Кликните для подробной информации
Ниже ориентираСовременные инструментыПонятные задачиПродукт в кибербезопасности
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Senior Application Security Engineer (Windows/Cybersecurity): Securing Windows applications and automating application security controls across CI/CD pipelines with an accent on bug bounty management, security analysis, and vulnerability remediation. Focus on integrating SAST, DAST, and SCA tools, conducting threat modeling and code reviews, and validating fixes across desktop, cloud, and mobile applications.
Location: Italy (Remote); other available locations include Spain (Remote) and Tallinn, Estonia (on-site, hybrid, remote)
Annual compensation: €70,000–€87,000, subject to country, experience, and interview performance.
Company
hirify.global develops cybersecurity, privacy, and identity protection solutions supported by threat research and AI-powered processes.
What you will do
Automate application security processes in CI/CD pipelines by integrating SAST, DAST, and SCA tools.
Coordinate external code reviews and penetration tests, triage findings, and advise development teams on severity and remediation.
Conduct threat modeling, design reviews, and application security consultations with product and engineering teams.
Administer the bug bounty program, support vulnerability triage, and collaborate with external researchers and the platform vendor.
Validate reported vulnerabilities and verify that implemented fixes mitigate associated risks.
Promote secure development practices and strengthen the organization’s security culture.
Requirements
Substantial experience securing Windows desktop applications and performing code reviews and security analysis.
Hands-on experience managing bug bounty programs and using SAST, DAST, and SCA tools.
Experience with GitHub, GitHub Actions, and GitHub Advanced Security.
Software development skills in C, C++, C#, or Java, plus experience securing cloud, desktop, and mobile applications.
Strong written and verbal communication skills for explaining complex security topics to technical and non-technical audiences.
Ability to work independently, adapt to changing security technologies, and collaborate across development teams.
Nice to have
Red teaming experience and certifications such as CISSP, CEH, or GIAC Reverse Engineering.
Hands-on AWS and Terraform experience.
Advanced macOS, iOS, and Android security knowledge.
Knowledge of digital forensics, security architecture, system administration, and networking.
Culture & Benefits
Security-first environment focused on learning, independent work, and collaboration.
Medical, dental, and vision insurance coverage.
Employee referral bonus program.
Wellness programs and comprehensive time off policy.
Benefits may vary by country or region.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →