Description:

The Application Security Engineer will be responsible for identifying and mitigating security vulnerabilities within software applications.
This role involves building security tools, performing code reviews, penetration testing, and conducting security assessments.
The engineer will work closely with development teams to integrate secure coding practices throughout the software development lifecycle (SDLC).
Daily tasks include conducting regular security assessments, designing and implementing security tools, conducting threat modeling and risk assessments, and managing vulnerabilities in applications.
The engineer will assist in investigating and responding to security incidents related to applications, ensuring timely resolution and documentation.
Continuous learning about the latest security threats, vulnerabilities, and technologies is essential to enhance security measures in applications.

Requirements:

Candidates must have extensive experience (5+ years) in information security, cybersecurity, or a related field, with significant experience in Application Security Engineer duties.
A deep understanding of security technologies, tools, and best practices is required, including secure coding practices, threat modeling, risk assessments, and incident response.
Experience in application security, software development, or related areas is necessary, along with a strong understanding of secure coding practices and application security frameworks.
Proficiency in programming/scripting languages such as PHP or Python is required.
Knowledge of security tools like Burp Suite, OWASP ZAP, and Metasploit, as well as familiarity with security protocols and encryption methods, is essential.
Strong verbal and written communication skills are necessary to explain complex security issues to both technical and non-technical audiences.
Experience with Bug bounty platforms (e.g., HackerOne) is considered an advantage.

Employees will be part of a friendly, inclusive, and global team.
There is an opportunity to work remotely or in a modern office in Rīga or Tallinn, or from a co-working space in Barcelona.
Flexible working hours are offered, allowing employees to start their day as late as 11 a.m.
Health insurance is provided.
Employees have access to mentorship, internal meetups, and hackathons both on-site and online.
Exciting team-building events and memorable parties are organized.
Free and healthy lunch is available for those working from the Rīga office.
Employees can design and order their own merchandise using the company's platforms with an employee discount.
An Apple MacBook laptop is provided as standard work equipment.