Job
Core
Embed security throughout the software development lifecycle by partnering with engineering teams to identify, assess, and remediate vulnerabilities in applications and APIs.
Role type
Senior Application Security Engineer
Builds
Secure software releases and resilient application/API infrastructure
Domain
Fintech / Application Security
Required skills
Application security assessments, Threat modelling, Secure code reviews, Penetration testing, CI/CD security integration, Vulnerability triage, Security standards definition, Bug bounty program management, Security training, Third-party library evaluation
Preferred skills
Regulated financial services experience, Hungarian language skills
Technologies
Burp Suite, OWASP ZAP, Semgrep, Checkmarx, Snyk, Python, JavaScript, Java, Go, GitHub Actions, Jenkins, GitLab CI, AWS, Azure, GCP
Responsibilities
Perform application security assessments including threat modelling, secure code reviews, and penetration testing across web, mobile, and API surfaces; Partner with development teams to integrate security controls into CI/CD pipelines using SAST, DAST, SCA, and secrets detection tooling; Identify, triage, and track vulnerabilities through to remediation, working closely with engineering teams to provide actionable guidance; Define and maintain application security standards, secure coding guidelines, and developer-facing security documentation; Champion security-by-design principles and provide hands-on guidance during the design and architecture phases of new features and products; Lead and support bug bounty and responsible disclosure programmes, coordinating triage and remediation of externally reported issues; Conduct security training and awareness sessions for software engineers, embedding secure development practices across teams; Evaluate third-party libraries, open-source components, and vendor integrations for security risk; Collaborate with the broader Security team on incident response activities related to application-layer vulnerabilities
Seniority
Senior, hands-on IC
