HQ - Senior Application Security Engineer (Remote)

Location: Remote, with flexibility within ±1 hour of CET; Madrid HQ, Spain.

Company

hirify.global builds products that connect people with work and supports secure, scalable engineering practices.

What you will do

• Act as the Application Security subject matter expert for Engineering and Product teams across the SDLC.
• Lead application security reviews, threat modelling, secure code reviews, and penetration testing.
• Design and automate security controls in CI/CD pipelines, including SAST and SCA tooling.
• Own the technical roadmap for the Application Security program and scale secure development practices.
• Manage WAF, Kubernetes security, and vulnerability management controls.
• Mentor Security Champions and junior engineers while defining metrics for risk reduction and program effectiveness.

Requirements

• 3–4 years of Information Security experience, including at least 2 years in Application Security.
• Strong experience with Secure SDLC, threat modelling, application security reviews, and secure code reviews.
• Hands-on experience with SAST, SCA, and automated security testing in CI/CD pipelines.
• Knowledge of OWASP Top 10, OWASP ASVS, API Security, and secure coding practices.
• Experience with WAF solutions, internal penetration testing, API testing with Burp Suite, Kubernetes security, cloud-native applications, and networking fundamentals.
• Basic scripting or development experience, preferably in Python, plus strong communication skills.

Culture & Benefits

• Permanent employment in a fully remote workplace.
• Flexible working arrangement within ±1 hour of CET.
• Opportunity to influence secure development practices across engineering teams.
• Focus on mentoring, developer enablement, and building a strong security culture.