Application Security Engineer

TL;DR

Application Security Engineer: Building and scaling security practices for a leading collaboration platform with an accent on threat modeling, security design reviews, and vulnerability management. Focus on eliminating systemic vulnerabilities, driving secure coding standards, and partnering with engineering teams to ship secure software.

Location: Must be based in Warsaw, Poland (Office-centric hybrid schedule).

Salary: 31,900 - 36,250 PLN gross per month.

Company

Asana is a leading platform for human and AI collaboration, helping millions of teams achieve their goals through innovative software solutions.

What you will do

• Conduct security architecture reviews and threat modeling for new features and services.
• Perform vulnerability assessments and drive remediation of security weaknesses.
• Triage and investigate vulnerabilities from bug bounty programs and automated tooling.
• Influence engineering roadmaps by communicating security constraints and trade-offs.
• Investigate product security incidents as a subject matter expert.
• Develop and deliver training on secure coding best practices and emerging threats.

Requirements

• Must be based in Warsaw, Poland for an office-centric hybrid role.
• 5+ years of experience in application security, product security, or software engineering.
• Strong background in Python, JavaScript, TypeScript, or Scala.
• Deep knowledge of OWASP Top 10 and common web vulnerabilities.
• Experience with SAST, DAST, and SCA security tools.
• Proven ability to perform threat modeling for complex, distributed applications.

Culture & Benefits

• Contract of Employment (UoP) with potential for 50% tax-deductible costs.
• Comprehensive health insurance including dental and travel coverage.
• Breakfast and lunch catering provided on office days.
• Career growth, home office setup, and mental health support budgets.
• Generous compensation package including base salary and RSUs.
• Collaborative, inclusive culture focused on innovation and professional development.