Security Engineer

Location: Remote / Europe

We are seeking a skilled Application Security Engineer to strengthen the security posture of web and API-based applications. The role focuses on integrating security into the SDLC, managing security tools, identifying vulnerabilities, and working closely with engineering teams to drive timely remediation.

Your expertise:

• Bachelor’s degree in Computer Science, Information Security, or related field
• 3–6 years of experience in Application Security or related domain
• Hands-on experience with SAST, DAST, and vulnerability scanning tools
• Strong understanding of OWASP Top 10, web application and API security
• Experience with CI / CD pipeline integrations (e.g., Jenkins, GitHub Actions, GitLab)
• Knowledge of secure coding practices and common vulnerability patterns
• Familiarity with scripting (Python, Bash, or similar) is a plus

Will definitely be a plus:

• Experience with threat modeling and secure design reviews
• Exposure to red teaming or penetration testing techniques
• Relevant certifications (e.g., OSCP, CEH, GWAPT) are a plus

You will be involved into:

Application Security Engineering

• Provide security engineering support for web and API applications
• Integrate security controls into the Secure SDLC, including threat modeling and security design reviews
• Ensure adherence to organizational security standards and best practices

Vulnerability Scanning & Tool Administration

• Administer and manage vulnerability scanning tools (e.g., Tenable or similar)
• Configure, tune, and maintain scanning policies and schedules
• Optimize tool performance to improve accuracy and reduce false positives

SAST & DAST Integration

• Implement and maintain SAST and DAST tools within CI / CD pipelines
• Configure detection rules and improve result reliability
• Collaborate with engineering teams to ensure seamless integration and actionable outputs

Vulnerability Discovery & Risk Prioritization

• Identify and validate vulnerabilities through automated and manual testing
• Perform false-positive analysis and assess exploitability
• Provide risk-based prioritization aligned with business impact

Operational Execution & Remediation

• Review scan results and track vulnerabilities to closure
• Coordinate with development teams for timely remediation
• Ensure adherence to defined workflows and SLAs

Red Team & Offensive Security Techniques

• Validate vulnerabilities using manual testing and offensive security methods
• Develop proof-of-concept exploits where required
• Document attack paths, reproduction steps, and impact clearly

Security Testing & Bug Validation

• Perform manual and automated security testing for applications and APIs
• Reproduce and validate reported issues across environments
• Verify remediation effectiveness before closure

About the company and project:

ZONE3000 is a 2400+ people family that forms a new cultural code in the software development business. For 25 years we have been focusing on the highest quality of projects and empowering people to think big and make a difference. We are looking for talents who want to create and improve technological solutions for tomorrow and make things as best possible.

ZONE3000 is looking for an Application Security Engineer for our client — a leading global collaboration platform that is transforming the way people work together, from the smallest businesses to the largest enterprises. With over 500 million registered users across more than 180 countries, its products are designed to create a more enlightened way of working.

Відгукнутись на вакансію