Application Security Engineer
Pepperstone10 days ago
Budapest, HungarySenior
Responsibilities
- Perform threat modeling, secure code reviews, penetration testing, and application security assessments across web, mobile, and API surfaces.
- Integrate SAST, DAST, SCA, and secrets detection tools into CI/CD pipelines.
- Identify, triage, track, and guide remediation of application vulnerabilities.
- Define application security standards, secure coding guidelines, and developer-facing documentation.
- Provide security-by-design guidance during feature and product design and architecture.
- Lead and support bug bounty and responsible disclosure programs.
- Conduct security training and awareness sessions for software engineers.
- Evaluate third-party libraries, open-source components, and vendor integrations for security risk.
- Collaborate on incident response activities involving application-layer vulnerabilities.
Requirements
- 8+ years of experience in information security, including at least 3 years specializing in application security or software security engineering.
- Strong understanding of OWASP Top 10, business logic flaws, and API security risks.
- Hands-on experience with Burp Suite, OWASP ZAP, Semgrep, Checkmarx, Snyk, or equivalent tools.
- Proficiency in at least one programming or scripting language such as Python, JavaScript, Java, or Go.
- Experience integrating security tooling into CI/CD pipelines using GitHub Actions, Jenkins, GitLab CI, or similar.
- Familiarity with cloud security principles across AWS, Azure, or GCP.
- Strong communication skills for explaining security risks to technical and non-technical stakeholders.
- OSCP, GWEB, CEH, or equivalent certification is advantageous.
- Experience in regulated financial services or fintech is advantageous.
- Fluency in English is required; Hungarian language skills are advantageous.
- Commitment to Pepperstone’s values and to ongoing learning and development.
Benefits
- Hybrid working with the option to work remotely from anywhere for up to 4 weeks per year.
- Company bonus scheme, medical insurance, pension fund, paid sick leave, and paid vacation increasing from 21 to 25 days after one year.
- Three paid volunteering days per year and a Workplace Giving Program.
- Employee referral bonuses, personal development opportunities, recognition programs, events, Employee Assistance Program, and wellbeing initiatives.
- Office located near the Limassol Municipal Garden.
Tech Stack
Categories
About Pepperstone
Pepperstone is a Melbourne‑headquartered, privately held online broker for forex and CFDs serving retail and professional traders worldwide. Founded in 2010 and owned by CPE Capital, it offers trading in FX, indices, commodities, cryptocurrencies and more via MetaTrader and cTrader platforms, with regulation across major jurisdictions (e.g., ASIC and FCA). Revenue comes from spreads, commissions, and financing on leveraged products.