Application Security Engineer (f/m/d)
Core
Establish and lead an Application Security program, acting as an evangelist to embed security into the SDLC and product design.
Role type
Senior Application Security Engineer (DevSecOps & Security Culture)
Builds
Secure CI/CD pipelines, threat models, secure design patterns, and AI/LLM security guidelines for web applications.
Domain
Application Security, DevSecOps, AI/ML Security
Deliverable
production ML models | product features | dashboards & analysis
Required skills
Application security, SDLC security integration, threat modelling, secure code reviews, vulnerability lifecycle management, AI/LLM security, security training & enablement, cloud native security, automation scripting
Preferred skills
Mentorship, stakeholder management, research & innovation
Technologies
SAST, DAST, SCA, CI/CD, AWS, Terraform, Containers, JS, PHP, Python
Responsibilities
Integrate security tooling into CI/CD pipelines; conduct threat modelling and secure design reviews; manage vulnerability lifecycle and support bug bounty; guide developers on secure coding and AI/LLM risks; deliver security training and workshops; research emerging threats and attack trends.
Seniority
Senior, hands-on IC with leadership responsibilities
