Application Security Engineer

The Defense Procurement Agency (DOT) is a national agency responsible for procuring ammunition, UAVs, military equipment, fuel, food, clothing, and other critical supplies for the Armed Forces of Ukraine and the Defense Forces.

Our mission: Strengthening Ukraine by ensuring reliable support for the Defense Forces while fostering the development of the national defense industry.

Our vision: To become the driving force behind the transformation of Ukraine's defense procurement ecosystem—not only operating the system, but continuously improving it.

We are currently looking for an Application Security Engineer who will be responsible for developing and implementing application security practices, building Secure Software Development Lifecycle (SSDLC) processes, integrating automated security controls into CI/CD pipelines, and ensuring security across infrastructure and software development processes.

Responsibilities

• Work on Application Security / DevSecOps initiatives and contribute to the development of application security practices.
• Design, implement and improve Secure Software Development Lifecycle (SSDLC) processes.
• Automate security controls and integrate them into CI/CD pipelines.
• Conduct security reviews of infrastructure, CI/CD pipelines and Infrastructure as Code (Terraform).
• Collaborate with Infrastructure, DevOps and Software Engineering teams to integrate security requirements into system architecture and software development processes.
• Work with Web Application Firewall (WAF) solutions.
• Conduct Security Code Reviews and manual code analysis to identify potential security vulnerabilities.

Requirements

• Bachelor's or Master's degree in Cybersecurity, Information Technology, Computer Science or a related field.
• 3+ years of experience in cybersecurity, specifically in Application Security roles.
• Hands-on experience in Application Security / DevSecOps and a solid understanding of SSDLC principles.
• Knowledge of secure software development practices and standards, including OWASP ASVS, OWASP SAMM and NIST SSDF.
• Practical experience with SAST, DAST, SCA and Secrets Scanning tools, as well as integrating security controls into CI/CD pipelines.
• Understanding of Cloud Security, containerization, and Docker/Kubernetes security.
• Experience writing Python and Bash scripts for automation.
• Understanding of network security fundamentals, HTTP/HTTPS, APIs and common web vulnerabilities.
• Understanding of microservices architecture and its security principles.
• Knowledge of common web application and API vulnerabilities, including OWASP Top 10.
• Experience working with GitLab.
• Strong analytical and systems thinking skills, proactivity and ability to make and justify decisions.
• High level of responsibility, result orientation and ability to work effectively in a team.

What We Offer

• Meaningful work that directly contributes to strengthening Ukraine's defense capabilities.
• Сompetitive salary and benefits.
• Professional development, learning opportunities, and career growth.
• Structured onboarding and dedicated mentorship.
• A collaborative, supportive, and mission-driven team.

By joining our team, you will contribute to one of Ukraine's largest digital transformation initiatives in the defense sector and help build the future of defense procurement.

Ready to make a real impact? We'd love to hear from you. Apply today!

* By submitting your CV, you consent to the processing of your personal data in accordance with applicable legislation.

** Due to the high volume of applications, only candidates whose qualifications best match the position will be contacted.