We’re looking for an Application Security Engineer to build security into our day-to-day development process, from idea and architecture through to release and post-release hardening. You’ll work closely with product teams, DevOps and infrastructure on an Azure / AKS / GitHub Enterprise / Terraform stack.
What you’ll do
Run security reviews at every stage: pre-design, development and post-release hardening
Build and improve DevSecOps processes in CI/CD (SAST, DAST, SCA, IaC scanning)
Do threat modeling and secure code reviews
Strengthen the security of AKS and our Azure infrastructure
Automate security checks and routine tasks
Advise developers and act as their Security Champion
What we’re looking for
4+ years of experience as an Application Security Engineer, DevSecOps Engineer, Security Engineer or Security Champion
A degree in Cybersecurity, Computer Science, Software Engineering or a related field
Experience working with product teams or internal development platforms
Web application security: secure code review, threat modeling, SAST, DAST, OWASP ASVS
CI/CD and IaC: GitHub Enterprise, securing Terraform code, Trivy, Checkmarx
Containers: AKS security architecture, Network Policies, Azure Pod Identity
Supply chain security: SCA, SBOM
Automation: strong PowerShell and/or Python skills (Azure CLI, REST API)
English: Pre-Intermediate / Intermediate or higher (enough to read technical documentation and architecture guides)
Nice to have
A successful track record on Bug Bounty platforms
Experience doing security reviews across the full product lifecycle
Who you are
You love automation: if you’ve done something twice, it’s time to write code for it
You communicate easily: you get along with developers, infrastructure engineers, PMs and business analysts alike
You want to grow: you keep learning, take initiative and motivate the people around you
What we offer
A professional team and room to grow in your career
A competitive salary
Official employment and social benefits
Military service deferment (reservation) for eligible employees, in line with current Ukrainian law
A real say in how projects are managed and how key strategic initiatives are delivered
A work culture that values initiative, responsibility, leadership and a focus on results
