Plata Card·Worldwide·27 июня
Application Security Engineer - Senior
Ориентир по рынку≈ 1 382 000 – 1 654 000 ₽наша приблизительная оценка по 15 вакансиям этой роли и грейда, у работодателя вилка не указана
🌍 УдалённоSeniorПолная занятость🌐 ГлобалРелокация
49
Есть о чём спросить
Вилки нет, про деньги придётся договариваться с нуля.
Вакансия на английскомПереведёт заголовок и описание вакансии на русский
Наша компания
We are looking for an Application Security Engineer to join our Information Security team. The Information Security team is responsible for protecting Plata’s products, systems, and data by embedding security throughout the technology lifecycle. We work closely with engineering teams to identify and mitigate security risks, strengthen application defenses, and ensure security is integrated into every stage of software development.
О роли
As an Application Security Engineer, you will serve as a key link between development and security teams, designing, implementing, and maintaining robust application security controls. You’ll help embed security across the entire software development lifecycle — from design and development to testing and deployment — while continuously improving our application security practices.
Чем предстоит заниматься
Collaborate with Dev & Ops teams. Guide secure coding practices, participate in code reviews, and embed security seamlessly into the SDLC
Conduct security reviews & threat modeling. Analyze application architecture, define threat models, and drive proactive risk identification
Integrate security tools. Deploy and manage SAST, DAST, IAST, RASP, and SCA tools within CI/CD pipelines to automate early detection and remediation
Handle security incidents
Implement “shifting left” strategies, enforce continuous testing, fast remediation, and embed security culture across teams
Educate and train. Conduct workshops to elevate developer security awareness and promote adherence to OWASP, ASVS, and secure design standards
Наши требования
Proficient in programming languages (web/mobile)
Strong understanding of web architectures (microservices)
Deep knowledge of OWASP Top 10, threat modeling, and security testing frameworks
Familiarity with security tools such as ZAP, Dependency-Track, Burp
Strong analytical skills with precise and thorough attention to detail
Security certifications (OSCP, OSWE, GWAPT, GCPN)
Contributions to or experience with bug bounty or ethical-hacking programs
SaaS or cloud-native environments experience
Familiarity with Kubernetes or container security
Мы предлагаем
Relocation support to Kazahstan, Cyprus, Serbia or Spain with full visa & permit support to the employee and family
Flexible work from one of our offices or remote
Healthcare Coverage
Education Budget: Language lessons, professional training and certifications
Wellness Budget: Mental health and fitness activity reimbursements
Vacation policy: 20 days of annual leave and paid sick leave
Дополнительно
Innovative Spirit: A commitment to creativity and groundbreaking solutions
Honest Feedback: valuing open, transparent communication
Supportive Team: a strong, collaborative community
Celebrating Achievements: recognizing our wins together
High-Tech Environment: a team full of smart and revolutionary people who date to challenge the status quo of incumbent finances