Application Security Engineer

About the company

• Plata is looking for an Application Security Engineer to join the Information Security team
• The team protects products, systems, and data by embedding security throughout the technology lifecycle

Responsibilities

• Collaborate with Dev & Ops teams, guide secure coding practices, participate in code reviews, embed security into SDLC
• Conduct security reviews and threat modeling, analyze application architecture
• Integrate security tools: SAST, DAST, IAST, RASP, SCA within CI/CD pipelines
• Handle security incidents
• Implement "shifting left" strategies, continuous testing, fast remediation
• Educate and train developers, conduct workshops on OWASP, ASVS, secure design standards

Requirements

• Proficient in programming languages (web/mobile)
• Strong understanding of web architectures (microservices)
• Deep knowledge of OWASP Top 10, threat modeling, security testing frameworks
• Familiarity with ZAP, Dependency-Track, Burp
• Strong analytical skills and attention to detail

Bonus skills

• Security certifications (OSCP, OSWE, GWAPT, GCPN)
• Bug bounty or ethical-hacking experience
• SaaS or cloud-native environments experience
• Kubernetes or container security

Conditions

• Relocation support to Kazakhstan, Cyprus, Serbia or Georgia with visa & permit support
• Flexible work from office or remote
• Healthcare coverage
• Education budget
• Wellness budget
• Annual leave and paid sick leave