2 months ago
Kraków, PolandSenior
Responsibilities
- Provide technical leadership in application security, threat modeling, design reviews, and secure coding practices.
- Build security-critical components and remediate vulnerabilities across JavaScript, Go, Python, C++, and Java.
- Apply defense-in-depth through system hardening, Terraform-based cloud security, code review, cryptography, PKI, hashing, and secrets management.
- Automate SAST, DAST, IAST, software composition analysis, fuzzing, and other DevSecOps practices.
- Lead threat-modeling exercises to identify application risks, threats, and vulnerabilities during development.
- Develop secure AI development practices and AI security tooling.
- Identify, track, and remediate third-party library vulnerabilities and software supply-chain risks.
Requirements
- 2–5 years of relevant technical experience, including 1–2+ years focused on application security or security engineering.
- Expert-level knowledge of web application vulnerabilities, OWASP Top 10, attack vectors, and secure code review.
- Ability to develop in and navigate security pitfalls in at least one primary language such as Python, Go, Java, C#, JavaScript, or C++.
- Hands-on experience with SAST, DAST, IAST, SCA, and penetration-testing frameworks.
- Working knowledge of AWS, Azure, or GCP; networking; databases; and containerized or infrastructure-as-code environments.
- Ability to simplify complex security challenges and drive proactive solutions collaboratively.
- Preferred: fintech or financial-services experience, Terraform and cloud-secrets experience, AI security exposure, knowledge of SOC2, ISO27001, NIST, and GDPR, and involvement in the cybersecurity community.
Categories
About OANDA
OANDA builds retail trading platforms and data services focused on foreign exchange and CFDs, plus a widely used currency converter and exchange-rates API. It earns through brokerage spreads/fees and data subscriptions, serving individual traders and businesses worldwide. Founded in 1996 and headquartered in New York, OANDA operates regulated entities in major markets and is owned by FTMO.