# Application Security Engineer

**Company**: Solidgate
**Location**: Warsaw; Europe; Europe; Nicosia; Lviv
**Work arrangement**: remote
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Finance

**Apply**: https://jobs.ashbyhq.com/solidgate/27bd50e1-8161-4e53-bb08-94508d3004f6?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_00cbf53a-4d2

## Description

Our mission at Solidgate is to empower outstanding entrepreneurs to build exceptional internet companies.

As an Application Security Engineer, you will play a crucial role in keeping our business and revenue safe by building security into the way we develop software , from early design decisions to CI/CD pipelines and live production systems.

You will work closely with engineering teams to:

- Design secure application architectures

- Improve secure coding practices

- Detect vulnerabilities early in the development lifecycle

- Continuously improve application security as part of everyday engineering work

Responsibilities include:

- Building and maintaining secure coding standards and supporting their adoption across development teams

- Conducting threat modeling during architecture and design stages

- Implementing and improving application security testing, including SAST, DAST, Dependency and secrets scanning, CI/CD security checks

- Performing regular application security assessments and maturity evaluations (OWASP ASVS, OWASP SAMM)

- Managing the full vulnerability lifecycle: triage, prioritization, remediation support, and validation

- Supporting external penetration testing and Bug Bounty programs

- Identifying and mitigating security risks in cloud environments and CI/CD pipelines

Requirements:

- At least 2 years of experience in Application Security or Product Security

- Hands-on experience with OWASP Top 10 vulnerabilities

- Practical experience with secure code reviews, threat modeling, SAST and DAST tools and their integration into CI/CD pipelines

- Strong understanding of web application and API security

- Ability to communicate clearly with engineers and work as a partner rather than a blocker

Nice to Have:

- Experience with container security and cloud security tooling

- Familiarity with DevSecOps and shift-left security practices

- Experience automating application security processes

- Background as a software engineer or close collaboration with development teams

Benefits:

- 30+ days off

- Unlimited sick leave

- Free office meals

- Health coverage

- Apple gear to keep you productive

- Courses, conferences, sports and wellness benefits

## Skills

### Required
- Application Security
- OWASP Top 10
- secure code reviews
- threat modeling
- SAST
- DAST

### Nice to have
- container security
- cloud security tooling
- DevSecOps
- shift-left security practices
- automation

---

Source: [Apply at jobs.ashbyhq.com](https://jobs.ashbyhq.com/solidgate/27bd50e1-8161-4e53-bb08-94508d3004f6?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)