Мы используем технические cookie и статистику посещений: Яндекс Метрику и собственный обезличенный журнал Zorky (cookie zk_aid). Не собираем содержимое форм, текст поиска и полный IP; данные не продаём. Отказаться можно кнопкой ниже, а также через Global Privacy Control или Do Not Track в браузере. Подробнее о cookie и статистике.
Zorky CRMZorky CRM
EN|RU
@termdocs
← Все вакансии

Senior Application Security Engineer

seniorremote2,000 USD · период не указанWroclaw, PLСкор 78/1005д назад
Аналитика рынка
📊 Security: зарплаты и спрос на рынке
Стек
Application SecurityWeb Application SecurityAPI securitySecure Code Reviewthreat modelingOWASP TOP 10Vulnerability AssessmentAuthenticationAuthorizationCryptographyagileaws
Откликнуться
Загрузите резюме — мы свяжем вас с работодателем напрямую через нашу базу.
Отправить резюме →
Описание
We are looking for a Senior Application Security Engineer to reduce security risk across web applications and APIs throughout the software development lifecycle. You will partner closely with engineering teams to assess application security, perform secure design and code reviews, validate and prioritize findings, and drive remediation to closure. This role focuses on practical application security outcomes: identifying real risk, reducing false positives, and helping teams build and ship secure software efficiently. Responsibilities Perform security assessments of web applications, APIs, services, and supporting components Facilitate threat modeling and review architectures and technical designs from a security perspective Conduct secure code reviews and identify vulnerabilities and insecure implementation patterns Validate findings from automated tools, reduce false positives, and prioritize issues based on exploitability and business impact Provide clear, actionable remediation guidance and secure implementation recommendations Track findings through remediation and retesting in collaboration with development teams Advise teams on authentication, authorization, session management, input validation, data protection, cryptography, secrets handling, and API security controls Contribute to secure SDLC practices, security standards, guidelines, and reusable security patterns Communicate security risks and recommendations to technical and non-technical stakeholders Requirements
Контакты работодателя (email/phone/telegram) скрыты из публичного превью — отправьте резюме, чтобы мы связали вас напрямую.
Срочный вопрос? Напишите @termdocs