Application Security Engineer

About the company

• Globally distributed engineering environment with application security built into the SDLC.

Responsibilities

• Investigate and remediate application security vulnerabilities directly in the code, implement fixes, and submit pull requests.
• Deploy, configure, maintain, and optimize SAST and SCA tools across repositories and CI/CD pipelines.
• Tune security rules, reduce false positives, and improve scanning accuracy.
• Triage and prioritize findings from security scanners, dependency analyses, and penetration tests.
• Review pull requests and application designs to identify security weaknesses.
• Develop and share secure coding guidelines.
• Collaborate with distributed teams during US business hours.

Requirements

• Strong software development experience with Python and Go.
• Hands-on application security experience with OWASP Top 10, vulnerable dependencies, exposed secrets, authentication, and session management.
• Direct experience deploying, configuring, and operating SAST and SCA tools within CI/CD pipelines.
• Solid understanding of secure software development practices and vulnerability management.
• Strong communication and collaboration skills.
• Availability to work during US business hours.
• Experience in healthcare or regulated industry is an advantage.

Conditions

• Company-paid medical insurance and mental health programs.
• Five undocumented sick-leave days per year.
• Internal meetups, conferences, workshops, Udemy license, language courses, company-paid certifications.
• 20 working days of paid vacation plus local bank holidays.
• 100% remote work.
• Internal mobility program.
• Long-term employment.