Application Security Engineer
Pepperstone4 months ago
Limassol, CyprusSenior
Responsibilities
- Perform threat modeling, secure code reviews, penetration testing, and application security assessments across web, mobile, and API surfaces.
- Integrate SAST, DAST, SCA, and secrets detection tools into CI/CD pipelines.
- Identify, triage, track, and support remediation of application vulnerabilities.
- Define application security standards, secure coding guidelines, and developer-facing documentation.
- Provide security-by-design guidance during product design and architecture.
- Lead and support bug bounty and responsible disclosure programs.
- Conduct security training and awareness sessions for software engineers.
- Evaluate third-party libraries, open-source components, and vendor integrations for security risks.
- Collaborate on incident response activities involving application-layer vulnerabilities.
Requirements
- 8+ years of information security experience, including at least 3 years specializing in application security or software security engineering.
- Knowledge of OWASP Top 10, business logic flaws, and API security risks.
- Hands-on experience with tools such as Burp Suite, OWASP ZAP, Semgrep, Checkmarx, and Snyk or equivalents.
- Proficiency in at least one of Python, JavaScript, Java, Go, or a similar programming or scripting language.
- Experience integrating security tooling into CI/CD pipelines using GitHub Actions, Jenkins, GitLab CI, or similar tools.
- Familiarity with cloud security principles across AWS, Azure, or GCP.
- Strong communication skills for explaining security risks to technical and non-technical stakeholders.
- OSCP, GWEB, CEH, or equivalent certification is advantageous.
- Experience in regulated financial services or fintech is a plus.
- Fluency in English is required; Hungarian is advantageous.
- Commitment to ongoing learning and alignment with Pepperstone values.
Benefits
- Competitive salary structure with a company bonus scheme.
- Hybrid working with the option to work remotely from anywhere for up to 4 weeks per year.
- 10 days of company-paid sick leave annually.
- 21 days of paid vacation in the first year, increasing to 25 days after one year.
- Three paid volunteering days per year and a Workplace Giving Program.
- Comprehensive medical insurance.
- Pension fund.
- Employee referral bonuses.
- Personal development and learning opportunities.
- Recognition and reward programs, frequent events, collaborative culture, Employee Assistance Program, and wellbeing initiatives.
- Convenient office near Limassol Municipal Garden.
Tech Stack
Categories
About Pepperstone
Pepperstone is a Melbourne‑headquartered, privately held online broker for forex and CFDs serving retail and professional traders worldwide. Founded in 2010 and owned by CPE Capital, it offers trading in FX, indices, commodities, cryptocurrencies and more via MetaTrader and cTrader platforms, with regulation across major jurisdictions (e.g., ASIC and FCA). Revenue comes from spreads, commissions, and financing on leveraged products.