Application Security Engineer
Pepperstone2 months ago
Limassol, CyprusSenior
Responsibilities
- Perform threat modeling, secure code reviews, penetration testing, and application security assessments across web, mobile, and API surfaces.
- Integrate SAST, DAST, SCA, and secrets detection tools into CI/CD pipelines.
- Identify, triage, track, and support remediation of application vulnerabilities.
- Define application security standards, secure coding guidelines, and developer-facing documentation.
- Provide security-by-design guidance during product design and architecture.
- Lead and support bug bounty and responsible disclosure programs.
- Conduct security training and awareness sessions for software engineers.
- Evaluate third-party libraries, open-source components, and vendor integrations for security risks.
- Collaborate on incident response activities involving application-layer vulnerabilities.
Requirements
- 8+ years of information security experience, including at least 3 years specializing in application security or software security engineering.
- Knowledge of OWASP Top 10, business logic flaws, and API security risks.
- Hands-on experience with tools such as Burp Suite, OWASP ZAP, Semgrep, Checkmarx, and Snyk or equivalents.
- Proficiency in at least one of Python, JavaScript, Java, Go, or a similar programming or scripting language.
- Experience integrating security tooling into CI/CD pipelines using GitHub Actions, Jenkins, GitLab CI, or similar tools.
- Familiarity with cloud security principles across AWS, Azure, or GCP.
- Strong communication skills for explaining security risks to technical and non-technical stakeholders.
- OSCP, GWEB, CEH, or equivalent certification is advantageous.
- Experience in regulated financial services or fintech is a plus.
- Fluency in English is required; Hungarian is advantageous.
- Commitment to ongoing learning and alignment with Pepperstone values.
Benefits
- Competitive salary structure with a company bonus scheme.
- Hybrid working with the option to work remotely from anywhere for up to 4 weeks per year.
- 10 days of company-paid sick leave annually.
- 21 days of paid vacation in the first year, increasing to 25 days after one year.
- Three paid volunteering days per year and a Workplace Giving Program.
- Comprehensive medical insurance.
- Pension fund.
- Employee referral bonuses.
- Personal development and learning opportunities.
- Recognition and reward programs, frequent events, collaborative culture, Employee Assistance Program, and wellbeing initiatives.
- Convenient office near Limassol Municipal Garden.
Tech Stack
Categories