SalariesSign in
AboutPrivacyTerms
Application Security Engineer
TripleTen

Application Security Engineer

CyprusRemoteFull-time
Pay Range: EUR 4k - EUR 6k / monthly
Posted Oct 2
Apply

Job Description

Description

Nebius Academy (powered by TripleTen) provides assessments and training for tech companies and aspiring professionals worldwide, helping companies & individuals transform their lives through career development and acquiring the new skills needed as a tech professional.

Our focus on data science, machine learning, and generative AI helps tech-forward companies level up their employees' skills and drive innovation.

We are looking for an Application Security Engineer to own product security end to end — from threat modelling and secure design reviews to vulnerability management and security controls embedded into CI/CD.

You will work closely with product and platform teams to make security part of the engineering process, building secure defaults and helping prevent vulnerabilities from reaching production without slowing development down.

What you will do

  • Own application and product security end to end, from design reviews and threat modelling to vulnerability remediation and follow-up.
  • Partner with product and platform teams to embed security into the development lifecycle rather than treat it as a final review step.
  • Build and improve security controls in CI/CD, including SAST, dependency, secrets, container, and IaC scanning.
  • Review application designs and code where security risk is meaningful, and turn recurring findings into secure defaults, shared libraries, lint rules, and CI gates.
  • Drive vulnerability management across application code and cloud posture, including triage, risk-based prioritisation, remediation timelines, and external pentest findings.
  • Strengthen security in multitenant B2B systems, including tenant isolation, authentication, authorization, RBAC / ABAC, and access controls.
  • Work on cloud and Kubernetes security across AWS environments, including IAM, secrets management, network boundaries, and workload hardening.
  • Help translate GDPR, SOC 2, and ISO 27001 requirements into practical engineering controls and system properties.
  • Develop and support a security champions programme to help engineering teams adopt secure practices in their day-to-day work.
  • Address security risks specific to AI and LLM-powered features, including prompt injection, data leakage, and untrusted model output.

Requirements

  • 5+ years of engineering experience, including at least 2 years focused on Application Security or Product Security.
  • Strong software engineering background with the ability to read, review, and write production code; Python experience is highly preferred.
  • Deep practical knowledge of web application security, including OWASP Top 10, ASVS, authentication and session management, OAuth2 / OIDC / SAML, and authorization issues such as IDOR and broken access control.
  • Experience securing multitenant or B2B SaaS products, including tenant isolation, RBAC / ABAC, and access control models.
  • Hands-on experience embedding security into CI/CD, including SAST, SCA, secrets scanning, container scanning, and IaC scanning.
  • Strong experience with threat modelling, secure design reviews, and secure code reviews in collaboration with product and engineering teams.
  • Experience managing vulnerabilities based on risk, criticality, and exploitability, including remediation prioritisation and escalation when needed.
  • Working knowledge of AWS and Kubernetes security, including IAM, secrets management, network boundaries, and workload hardening.
  • Strong communication skills and the ability to explain security risks clearly to engineers, product managers, and auditors.
  • Fluent Russian and English at B2 level or above.

Nice to have:

  • Experience building a DevSecOps practice from scratch.
  • Experience running or participating in a Security Champions programme.
  • Hands-on penetration testing experience.
  • Experience securing LLM-powered or AI products.
  • Experience with SOC 2 or ISO 27001 from an engineering perspective.
  • Knowledge of software supply chain security, including SBOMs, SLSA, image signing, or similar practices.

What we can offer you

  • A supportive and proactive work environment.
  • Competitive compensation: 4000-6000 EUR Gross per month
  • Fully remote and full-time collaboration.
  • Modern digital tools for seamless collaboration.
  • Tangible results measured by student success.

Originally posted on Himalayas

View job

Red Team Security Engineer

Backblaze

  • Colombia
  • Remote
  • Full-time
Apply
10 hrs ago
View job

Information Security Analyst (Product Assurance)

Lacuna Talent

  • United States
  • Remote
  • Full-time
Apply
10 hrs ago
View job
S

Senior Cyber Security Specialist

Softtest pays pty ltd

  • Australia
  • Remote
  • Full-time
Apply
10 hrs ago
View job

OT-Security Consultant / Penetration Tester (m/w/d)

Yekta IT GmbH

  • Germany
  • Remote
  • Full-time
Apply
10 hrs ago
View job
S

Client Assurance- InfoSec GRC - Remote US

SAMC SitusAMC Holdings Corp

  • United States
  • Remote
  • Full-time
Apply
11 hrs ago
View job

Network Security Engineer - Vulnerability & Compliance Focus

Support Tech LLC

  • United States
  • Remote
  • Full-time
Apply
11 hrs ago
View job

Principal AI Research Cybersecurity Scientist (Bay Area)

Alice

  • United States
  • Remote
  • Full-time
Apply
11 hrs ago
View job

Senior Risk Analyst

Apogee Global RMS

  • United States
  • Remote
  • Contract
Apply
13 hrs ago
View job

Security Compliance Engineer

Yuno

  • Argentina
  • Remote
  • Full-time
Apply
14 hrs ago
View job

Chief Information Security Officer (CISO) — Insurance & Investments

TheHiveCareers

  • Dominican Republic
  • Remote
  • Full-time
Apply
14 hrs ago
View job

Senior Incident Response Analyst

HealthEdge

  • United States
  • Remote
  • Full-time
Apply
14 hrs ago
View job
I

SME Security Control Assessor

IMAGINEEER LLC

  • United States
  • Remote
  • Full-time
Apply
15 hrs ago
View job

Cybersecurity Analyst Intermediate w/Splunk

General Dynamics Information Technology

  • United States
  • Remote
  • Full-time
Apply
15 hrs ago
View job

Information Security Risk Specialist

Booz Allen Hamilton

  • United States
  • Remote
  • Full-time
Apply
16 hrs ago
View job

Incident Response Analyst

Check Point Software

  • Australia
  • Remote
  • Full-time
Apply
17 hrs ago
View job

Mid-Level Security Automation Engineer

DecisionPoint Corporation

  • United States
  • Remote
  • Full-time
Apply
17 hrs ago
View job

Principal Security Compliance Analyst (FedRAMP) - Remote, U.S.

Entrust

  • United States
  • Remote
  • Full-time
Apply
17 hrs ago
View job
F

Cybersecurity Analyst II

Frontgrade Technologies

  • United States
  • Remote
  • Full-time
Apply
18 hrs ago
View job

Security Operations Engineer

Collectors

  • United States
  • Remote
  • Full-time
Apply
19 hrs ago
View job

IT Security Specialist (Microsoft Azure & 365 Focus)

Support Tech LLC

  • United States
  • Remote
  • Contract
Apply
19 hrs ago
View job

Cybersecurity Program Manager

Apogee Global RMS

  • United States
  • Remote
  • Contract
Apply
19 hrs ago
View job

Director, IT & Security

Illuminate Literacy

  • United States
  • Remote
  • Full-time
Apply
20 hrs ago
View job

Senior Security Operations Engineer

Sword Health

  • United States
  • Remote
  • Full-time
Apply
20 hrs ago
View job
S

Security Software Developer

Softtest pays pty ltd

  • Australia
  • Remote
  • Full-time
Apply
22 hrs ago
View job

National Security Manager

Fujifilm

  • United States
  • Remote
Apply
23 hrs ago
View job

Manager Identity & Trust Engineering

BlueCross BlueShield of Tennessee

  • United States
  • Remote
  • Full-time
Apply
23 hrs ago
View job

Senior Product Owner DevSecOps

Humana

  • United States
  • Remote
  • Full-time
Apply
23 hrs ago
View job

Sr. Engineer, Product Cyber Security

BD

  • United States
  • Remote
  • Full-time
Apply
23 hrs ago
View job

Sr. Security/ Technology Engineer

NV5

  • United States
  • Remote
  • Full-time
Apply
1 day ago
View job

Cyber Security Cloud Engineer

National Carwash Solutions

  • United States
  • Remote
  • Full-time
Apply
1 day ago
Page 1 of 128Next
TripleTen

Application Security Engineer

CyprusRemoteFull-time
Pay Range: EUR 4k - EUR 6k / monthly
Posted Oct 2
Apply

Job Description

Description

Nebius Academy (powered by TripleTen) provides assessments and training for tech companies and aspiring professionals worldwide, helping companies & individuals transform their lives through career development and acquiring the new skills needed as a tech professional.

Our focus on data science, machine learning, and generative AI helps tech-forward companies level up their employees' skills and drive innovation.

We are looking for an Application Security Engineer to own product security end to end — from threat modelling and secure design reviews to vulnerability management and security controls embedded into CI/CD.

You will work closely with product and platform teams to make security part of the engineering process, building secure defaults and helping prevent vulnerabilities from reaching production without slowing development down.

What you will do

  • Own application and product security end to end, from design reviews and threat modelling to vulnerability remediation and follow-up.
  • Partner with product and platform teams to embed security into the development lifecycle rather than treat it as a final review step.
  • Build and improve security controls in CI/CD, including SAST, dependency, secrets, container, and IaC scanning.
  • Review application designs and code where security risk is meaningful, and turn recurring findings into secure defaults, shared libraries, lint rules, and CI gates.
  • Drive vulnerability management across application code and cloud posture, including triage, risk-based prioritisation, remediation timelines, and external pentest findings.
  • Strengthen security in multitenant B2B systems, including tenant isolation, authentication, authorization, RBAC / ABAC, and access controls.
  • Work on cloud and Kubernetes security across AWS environments, including IAM, secrets management, network boundaries, and workload hardening.
  • Help translate GDPR, SOC 2, and ISO 27001 requirements into practical engineering controls and system properties.
  • Develop and support a security champions programme to help engineering teams adopt secure practices in their day-to-day work.
  • Address security risks specific to AI and LLM-powered features, including prompt injection, data leakage, and untrusted model output.

Requirements

  • 5+ years of engineering experience, including at least 2 years focused on Application Security or Product Security.
  • Strong software engineering background with the ability to read, review, and write production code; Python experience is highly preferred.
  • Deep practical knowledge of web application security, including OWASP Top 10, ASVS, authentication and session management, OAuth2 / OIDC / SAML, and authorization issues such as IDOR and broken access control.
  • Experience securing multitenant or B2B SaaS products, including tenant isolation, RBAC / ABAC, and access control models.
  • Hands-on experience embedding security into CI/CD, including SAST, SCA, secrets scanning, container scanning, and IaC scanning.
  • Strong experience with threat modelling, secure design reviews, and secure code reviews in collaboration with product and engineering teams.
  • Experience managing vulnerabilities based on risk, criticality, and exploitability, including remediation prioritisation and escalation when needed.
  • Working knowledge of AWS and Kubernetes security, including IAM, secrets management, network boundaries, and workload hardening.
  • Strong communication skills and the ability to explain security risks clearly to engineers, product managers, and auditors.
  • Fluent Russian and English at B2 level or above.

Nice to have:

  • Experience building a DevSecOps practice from scratch.
  • Experience running or participating in a Security Champions programme.
  • Hands-on penetration testing experience.
  • Experience securing LLM-powered or AI products.
  • Experience with SOC 2 or ISO 27001 from an engineering perspective.
  • Knowledge of software supply chain security, including SBOMs, SLSA, image signing, or similar practices.

What we can offer you

  • A supportive and proactive work environment.
  • Competitive compensation: 4000-6000 EUR Gross per month
  • Fully remote and full-time collaboration.
  • Modern digital tools for seamless collaboration.
  • Tangible results measured by student success.

Originally posted on Himalayas