Job
Core
Embed security throughout the software development lifecycle by identifying, assessing, and remediating vulnerabilities in applications and APIs.
Role type
Application Security Engineer
Builds
Secure software releases and resilient application-layer defenses
Domain
Fintech / Application Security
Required skills
Application security assessments, threat modelling, secure code reviews, penetration testing, CI/CD security integration, vulnerability triage, security standards definition, bug bounty program management, third-party library evaluation, security training delivery
Preferred skills
Programming/scripting (Python, JavaScript, Java, Go), cloud security (AWS, Azure, GCP), regulated fintech experience, OSCP/GWEB/CEH certification, Hungarian language skills
Technologies
Burp Suite, OWASP ZAP, Semgrep, Checkmarx, Snyk, GitHub Actions, Jenkins, GitLab CI
Responsibilities
Perform application security assessments including threat modelling, secure code reviews, and penetration testing across web, mobile, and API surfaces; Partner with development teams to integrate security controls into CI/CD pipelines using SAST, DAST, SCA, and secrets detection tooling; Identify, triage, and track vulnerabilities through to remediation, working closely with engineering teams to provide actionable guidance; Define and maintain application security standards, secure coding guidelines, and developer-facing security documentation; Champion security-by-design principles and provide hands-on guidance during the design and architecture phases of new features and products; Lead and support bug bounty and responsible disclosure programmes, coordinating triage and remediation of externally reported issues
Seniority
Senior, hands-on IC
