AppSec Engineer
Support and continuously improve vulnerability management across applications, infrastructure, containers, and cloud environments. Triage vulnerabilities, assess risk, prioritize remediation, conduct threat modeling and security risk assessments, define application security requirements, support Secure SDLC initiatives, and guide developers and DevOps engineers on secure design and remediation.
Responsibilities
- Support and continuously improve the company's Vulnerability Management process
- Perform vulnerability triage, risk assessment, prioritization, and remediation tracking
- Work with engineering teams to ensure timely remediation of identified vulnerabilities
- Analyze findings from multiple security tools and reduce noise through effective prioritization
- Monitor remediation SLAs and provide security posture reporting and metrics
- Participate in threat modeling for new systems, services, and architectural changes
- Conduct security risk assessments and provide actionable recommendations
- Define and maintain application security requirements with engineering teams
- Support Secure SDLC initiatives and integrate security practices into development workflows
- Guide developers and DevOps engineers on vulnerability remediation and secure design practices
Requirements
- 4+ years of experience in Application Security, Product Security, Vulnerability Management, or a related security discipline
- Hands-on experience managing vulnerabilities across applications, infrastructure, containers, and cloud environments
- Strong understanding of OWASP Top 10, CWE, CVSS, EPSS, MITRE ATT&CK, and risk-based vulnerability management
- Experience with SAST, DAST, SCA, Container Security, and Cloud Security tools
- Experience conducting threat modeling and security risk assessments
- Understanding of modern software development practices and CI/CD pipelines
- Familiarity with Kubernetes and AWS, GCP, or Azure
- Ability to make risk-based remediation recommendations
- Strong stakeholder management and communication skills
Benefits
- Up to €230/month flexible benefits budget
- Fully remote work from almost anywhere
- Optional offices and relocation support
- Flexible, async-friendly environment
- Courses, certifications, and professional development budget
- Language learning support
- Cross-team learning and knowledge sharing
- Medical insurance or reimbursement depending on location
- Mental health support
- Financial support for important life events
- Merch rewards system
- Team offsites and company events