Junior Cybersecurity Engineer (Application Security)

Location: Tartu, Estonia; hybrid work with at least 12 monthly in-office days

Company

Bolt is a global mobility platform providing ride-hailing, food delivery, micromobility, and car-sharing services across 50 countries.

What you will do

• Track security vulnerabilities from discovery through assignment, remediation, and follow-up.
• Support SAST, dependency scanning, and container scanning in CI/CD pipelines.
• Participate in security reviews by analyzing threat models and design documentation.
• Build small automations for vulnerability scanning, reporting, and notifications.
• Collect evidence and documentation for PCI DSS and ISO 27001 audits.
• Monitor developments and emerging issues in information security.

Requirements

• Hands-on cybersecurity experience demonstrated through CTFs, security projects, bug bounty findings, published write-ups, or equivalent practical work.
• Solid software engineering fundamentals and proficiency in at least one programming or scripting language, such as Python.
• Ability to read and reason about source code.
• Understanding of common vulnerability classes, including the OWASP Top 10.
• Strong problem-solving skills and ability to work independently on well-scoped tasks with senior guidance.
• Availability for the hybrid working model in Tartu, including at least 12 monthly in-office days.

Culture & Benefits

• Ownership and learning opportunities in small, autonomous engineering teams.
• Competitive salary and stock options.
• Physical and mental wellness benefits.
• One-month paid sabbatical after five years at Bolt.
• Annual company events and smaller team gatherings.
• AI tools are expected to be used responsibly in daily work.