Назад
Company hidden
12 дней назад

Senior Application Security Engineer (Cybersecurity)

70 000 - 87 000€
Формат работы
remote (только Europe)/hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
Spain/Italy/Estonia
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Application Security Engineer (Windows/Cybersecurity): Securing Windows applications and automating application security controls across CI/CD pipelines with an accent on bug bounty management, security analysis, and vulnerability remediation. Focus on integrating SAST, DAST, and SCA tools, conducting threat modeling and code reviews, and validating fixes across desktop, cloud, and mobile applications.

Location: Italy (Remote); other available locations include Spain (Remote) and Tallinn, Estonia (on-site, hybrid, remote)

Annual compensation: €70,000–€87,000, subject to country, experience, and interview performance.

Company

hirify.global develops cybersecurity, privacy, and identity protection solutions supported by threat research and AI-powered processes.

What you will do

  • Automate application security processes in CI/CD pipelines by integrating SAST, DAST, and SCA tools.
  • Coordinate external code reviews and penetration tests, triage findings, and advise development teams on severity and remediation.
  • Conduct threat modeling, design reviews, and application security consultations with product and engineering teams.
  • Administer the bug bounty program, support vulnerability triage, and collaborate with external researchers and the platform vendor.
  • Validate reported vulnerabilities and verify that implemented fixes mitigate associated risks.
  • Promote secure development practices and strengthen the organization’s security culture.

Requirements

  • Substantial experience securing Windows desktop applications and performing code reviews and security analysis.
  • Hands-on experience managing bug bounty programs and using SAST, DAST, and SCA tools.
  • Experience with GitHub, GitHub Actions, and GitHub Advanced Security.
  • Software development skills in C, C++, C#, or Java, plus experience securing cloud, desktop, and mobile applications.
  • Strong written and verbal communication skills for explaining complex security topics to technical and non-technical audiences.
  • Ability to work independently, adapt to changing security technologies, and collaborate across development teams.

Nice to have

  • Red teaming experience and certifications such as CISSP, CEH, or GIAC Reverse Engineering.
  • Hands-on AWS and Terraform experience.
  • Advanced macOS, iOS, and Android security knowledge.
  • Knowledge of digital forensics, security architecture, system administration, and networking.

Culture & Benefits

  • Security-first environment focused on learning, independent work, and collaboration.
  • Medical, dental, and vision insurance coverage.
  • Employee referral bonus program.
  • Wellness programs and comprehensive time off policy.
  • Benefits may vary by country or region.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →