2 months ago
Remote, EMEASenior / Staff+
Responsibilities
- Build and maintain Application Security Posture Management at company scale.
- Automate and support SAST, SCA, secrets detection, and related security tools in development pipelines.
- Improve SAST and secrets-detection rules while maintaining a low false-positive rate.
- Identify, analyze, and remediate application security vulnerabilities.
- Integrate security best practices into development teams’ software development lifecycle.
- Develop secure coding guidelines and tools for development teams.
- Conduct threat-modeling sessions and risk assessments for applications.
- Serve as an application security subject matter expert for other teams.
Requirements
- 6+ years of experience in application security.
- Strong knowledge of common application security risks, including the OWASP Top 10, and their mitigations.
- Experience with secure coding in Python, Go, Java, or JavaScript.
- Proficiency in a common programming language such as Go or Python, with willingness to learn Go if needed.
- Hands-on experience with Burp Suite, ZAP, Semgrep, or similar security testing tools.
- Understanding of authentication protocols such as SAML or OIDC.
- Experience conducting threat-modeling sessions.
- Preferred qualifications include security automation, compliance-to-technical-specification work, vulnerability exploitation, and OSCP or OSWE certifications.
Benefits
- Competitive compensation.
- Career growth and learning opportunities.
- Flexibility and ownership.
- Collaborative and innovative culture.
- Opportunity to work on impactful AI projects.
- International environment with talented teams.
Tech Stack
Categories
About Nebius
Nebius builds a full-stack AI cloud offering GPU compute, storage, and tools for training and deploying ML models for startups, enterprises, and research labs. It sells consumption-based cloud infrastructure (IaaS/PaaS) and managed services tailored to generative AI workloads, including large-scale model training and inference. The company is headquartered in Amsterdam and operates as an independent provider.