Application Security Engineer (AppSec / DevSecOps)

We're looking for an Application Security Engineer to build security into our day-to-day development process, from idea and architecture through to release and post-release hardening. You'll work closely with product teams, DevOps and infrastructure on an Azure / AKS / GitHub Enterprise / Terraform stack.

What you'll do: 

• Run security reviews at every stage: pre-design, development and post-release hardening
• Build and improve DevSecOps processes in CI/CD (SAST, DAST, SCA, IaC scanning)
• Do threat modeling and secure code reviews
• Strengthen the security of AKS and our Azure infrastructure
• Automate security checks and routine tasks
• Advise developers and act as their Security Champion
   

What we're looking for:

• 4+ years of experience as an Application Security Engineer, DevSecOps Engineer, Security Engineer or Security Champion
• A degree in Cybersecurity, Computer Science, Software Engineering or a related field
• Experience working with product teams or internal development platforms
• Web application security: secure code review, threat modeling, SAST, DAST, OWASP ASVS
• CI/CD and IaC: GitHub Enterprise, securing Terraform code, Trivy, Checkmarx
• Containers: AKS security architecture, Network Policies, Azure Pod Identity
• Supply chain security: SCA, SBOM
• Automation: strong PowerShell and/or Python skills (Azure CLI, REST API)
• English: Pre-Intermediate / Intermediate or higher (enough to read technical documentation and architecture guides)
   

Nice to have

• A successful track record on Bug Bounty platforms
• Experience doing security reviews across the full product lifecycle
   

Who you are

• You love automation: if you've done something twice, it's time to write code for it
• You communicate easily: you get along with developers, infrastructure engineers, PMs and business analysts alike
• You want to grow: you keep learning, take initiative and motivate the people around you
   

What we offer

• A professional team and room to grow in your career
• A competitive salary
• Official employment and social benefits
• Military service deferment (reservation) for eligible employees, in line with current Ukrainian law
• A real say in how projects are managed and how key strategic initiatives are delivered
• A work culture that values initiative, responsibility, leadership and a focus on results