About the role
We are looking for a Python Application Security Engineer to automate security controls and improve vulnerability management across CI/CD pipelines.
The mandatory requirements are 3–5 years in software engineering, Python, AppSec tooling or security architecture, CI/CD, vulnerability scoring frameworks, and upper-intermediate English. DevSecOps/AppSec experience, Java, CNAPP/ASPM tools, and threat modeling are a plus.
Must haves
- 3–5 years of commercial experience in software engineering.
- Solid coding proficiency in Python for automation and scripting.
- Working knowledge of modern CI/CD orchestration tools and practical experience interacting with vulnerability scoring frameworks.
- AppSec tooling expertise or security architecture.
- Ability to operate with minimal supervision on day-to-day execution, reliably completing complex scripting and integration tasks.
- Upper-intermediate English level.
Nice to haves
- Experience in DevSecOps/AppSec.
- Ability to comfortably read and navigate Java source code.
- Hands-on experience with specific CNAPP or ASPM platforms (e.g., Wiz).
- Basic understanding of application threat modeling.
What you will do
- Pipeline Integration: Write and maintain the scripts necessary to integrate security gates (SAST, DAST, SCA) seamlessly into the CI/CD pipeline.
- Security Data Triage: Continuously tune and configure existing security scanning tools to eliminate false positives and deliver high-confidence alerts.
- Baseline Automation: Assist in coding and deploying automated hardened baselines and secure coding patterns.
- Code-Level Remediation: Work directly with product development teams to provide actionable, code-level remediation guidance in Java and Python.
Perks
- Growth without limits: build your skills through mentorship, internal TechTalks, challenging projects, and a dedicated annual learning budget
- Competitive compensation: get recognition that reflects your skills and impact, with regular performance and compensation reviews
- Flexibility: work 100% remotely with flexible hours that support focus, autonomy, and a healthy work rhythm
- Meaningful, modern projects: build impactful products using modern technologies alongside global teams and leading brands
- Collaborative culture: join a supportive environment with zero micromanagement where ideas are welcomed and contributions are recognized
- Well-being & support: access local well-being programs and people-focused support tailored to your location