Application Security Engineer
Pepperstone4 months ago
Budapest, HungarySenior
Responsibilities
- Perform threat modeling, secure code reviews, penetration testing, and application security assessments across web, mobile, and API surfaces.
- Integrate SAST, DAST, SCA, and secrets detection tooling into CI/CD pipelines.
- Identify, triage, track, and guide remediation of application vulnerabilities.
- Define application security standards, secure coding guidelines, and developer-facing security documentation.
- Provide hands-on security-by-design guidance during product design and architecture.
- Lead and support bug bounty and responsible disclosure programs.
- Deliver security training and awareness sessions for software engineers.
- Assess third-party libraries, open-source components, and vendor integrations for security risks.
- Collaborate on incident response activities related to application-layer vulnerabilities.
Requirements
- 8+ years of experience in information security, including at least 3 years specializing in application security or software security engineering.
- Knowledge of OWASP Top 10, business logic flaws, and API security risks.
- Hands-on experience with tools such as Burp Suite, OWASP ZAP, Semgrep, Checkmarx, Snyk, or equivalent.
- Proficiency in at least one programming or scripting language, such as Python, JavaScript, Java, or Go.
- Experience integrating security tooling into CI/CD pipelines using GitHub Actions, Jenkins, GitLab CI, or similar.
- Familiarity with cloud security principles across AWS, Azure, or GCP.
- Strong communication skills for explaining security risks to technical and non-technical stakeholders.
- Relevant certifications such as OSCP, GWEB, or CEH are advantageous.
- Experience in regulated financial services or fintech is a plus.
- Fluency in English is required; Hungarian language skills are advantageous.
Benefits
- Competitive salary structure with a company bonus scheme.
- Flexible hybrid working arrangement in Budapest.
- Remote working from anywhere for up to 4 weeks per year.
- Ongoing personal development and learning opportunities.
- 3 paid volunteering days per year and a Workplace Giving Program.
- Recognition and reward programs, frequent events, and celebrations.
- Employee Assistance Program and wellbeing initiatives.
- Convenient office near Astoria at KLUSTER Coworking.
Tech Stack
Categories