The Application Security Engineer will embed security into the software development lifecycle at Solidgate, ensuring secure application architectures, improving coding practices, and reducing product risks across a cloud-native microservices platform that processes millions of payments daily.
What You'll Do
- Build and maintain secure coding standards and support their adoption across development teams
- Conduct threat modeling during architecture and design stages
- Implement and improve application security testing, including SAST, DAST, Dependency and secrets scanning, CI/CD security checks
- Perform regular application security assessments and maturity evaluations (OWASP ASVS, OWASP SAMM)
- Manage the full vulnerability lifecycle: triage, prioritization, remediation support, and validation
- Support external penetration testing and Bug Bounty programs
- Identify and mitigate security risks in cloud environments and CI/CD pipelines
What We're Looking For
- At least 2 years of experience in Application Security or Product Security
- Hands-on experience with OWASP Top 10 vulnerabilities
- Practical experience with: secure code reviews, threat modeling, SAST and DAST tools and their integration into CI/CD pipelines
- Strong understanding of web application and API security
- Ability to communicate clearly with engineers and work as a partner rather than a blocker
Nice to Have
- Experience with container security and cloud security tooling
- Familiarity with DevSecOps and shift-left security practices
- Experience automating application security processes
- Background as a software engineer or close collaboration with development teams
Technical Stack
- SAST
- DAST
- Dependency scanning
- Secrets scanning
- CI/CD security checks
- Cloud-native platform
- Microservices
- OWASP Top 10
- OWASP ASVS
- OWASP SAMM
Team & Environment
- engineering organization with over 120 microservices
- dedicated Application Security Engineer role within a growing security organization
Benefits & Compensation
- 30+ days off
- Unlimited sick leave
- Free office meals
- Health coverage
- Apple gear to keep you productive
- Courses
- Conferences
- Sports and wellness benefits
- Recommendation bonus for referring top talent
Solidgate is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.
