Application Security Engineer
Pepperstone6 months ago
Budapest, HungarySenior
Responsibilities
- Perform threat modeling, secure code reviews, penetration testing, and application security assessments across web, mobile, and API surfaces.
- Integrate SAST, DAST, SCA, and secrets detection tooling into CI/CD pipelines.
- Identify, triage, track, and guide remediation of application vulnerabilities.
- Define application security standards, secure coding guidelines, and developer-facing security documentation.
- Provide hands-on security-by-design guidance during product design and architecture.
- Lead and support bug bounty and responsible disclosure programs.
- Deliver security training and awareness sessions for software engineers.
- Assess third-party libraries, open-source components, and vendor integrations for security risks.
- Collaborate on incident response activities related to application-layer vulnerabilities.
Requirements
- 8+ years of experience in information security, including at least 3 years specializing in application security or software security engineering.
- Knowledge of OWASP Top 10, business logic flaws, and API security risks.
- Hands-on experience with tools such as Burp Suite, OWASP ZAP, Semgrep, Checkmarx, Snyk, or equivalent.
- Proficiency in at least one programming or scripting language, such as Python, JavaScript, Java, or Go.
- Experience integrating security tooling into CI/CD pipelines using GitHub Actions, Jenkins, GitLab CI, or similar.
- Familiarity with cloud security principles across AWS, Azure, or GCP.
- Strong communication skills for explaining security risks to technical and non-technical stakeholders.
- Relevant certifications such as OSCP, GWEB, or CEH are advantageous.
- Experience in regulated financial services or fintech is a plus.
- Fluency in English is required; Hungarian language skills are advantageous.
Benefits
- Competitive salary structure with a company bonus scheme.
- Flexible hybrid working arrangement in Budapest.
- Remote working from anywhere for up to 4 weeks per year.
- Ongoing personal development and learning opportunities.
- 3 paid volunteering days per year and a Workplace Giving Program.
- Recognition and reward programs, frequent events, and celebrations.
- Employee Assistance Program and wellbeing initiatives.
- Convenient office near Astoria at KLUSTER Coworking.
Tech Stack
Categories
About Pepperstone
Pepperstone is a Melbourne‑headquartered, privately held online broker for forex and CFDs serving retail and professional traders worldwide. Founded in 2010 and owned by CPE Capital, it offers trading in FX, indices, commodities, cryptocurrencies and more via MetaTrader and cTrader platforms, with regulation across major jurisdictions (e.g., ASIC and FCA). Revenue comes from spreads, commissions, and financing on leveraged products.