Application & AI Security Engineer

AdTech Holding

. Run security reviews of services, integrations and public APIs before production, including manual review of critical code .

Posted 10/14/2026full-timeLimassol • CyprusMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in application security, including code and architecture reviews, vulnerability management, and secure development practices. Proficient in threat modeling, static analysis, and automation, with a strong focus on collaboration and driving security initiatives across teams.

Highest-signal resume keywords

Application SecurityStatic AnalysisThreat ModelingVulnerability ManagementManual Testing

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Code ReviewArchitecture ReviewSASTDASTSCAOWASPAuthorizationPHPGoJavaScript

Soft Skills

CollaborationResults-Driven

Tools & Technologies

Burp SuiteZAPPythonBash

Certifications & Qualifications

OSWEGWEB

Industry Keywords

Vulnerability Management ProcessOWASP Top 10OWASP API Security Top 10LLM Application SecurityDevSecOps

Tech Stack

Tools & technologies

JavaScriptPHPPythonGo

About the role

Key responsibilities & impact

Run security reviews of services, integrations and public APIs before production, including manual review of critical code
Perform threat modeling for new features with product teams at the design stage
Own security checks in the development lifecycle, including static analysis, dependency scanning and secret detection
Manage coverage, rules and triage of security findings with teams
Build and maintain a unified vulnerability management process, including the vulnerability register, prioritization, SLAs, retesting and bug bounty
Secure AI integrations and define access policies for service and AI agent accounts
Run penetration tests and audits, including scoping, accepting results and following findings through to systemic fixes
Develop and maintain secure development standards, guidelines and training for developers

Requirements

What you’ll need

3+ years of experience in application security, covering code and architecture reviews, SAST, DAST, SCA and OWASP
Strong manual testing skills
Hands-on experience with static analysis, including writing custom rules
Solid understanding of authorization, including OAuth, OIDC, JWT, token scopes and delegated permissions
Ability to read PHP, Go and JavaScript code
Ability to automate tasks in Python or Bash
Ability to drive results with teams not managed directly, including through security champions
Interest in LLM application security, including prompt injection and AI agents’ access to data
Working proficiency in Russian and English
Experience with Burp Suite or ZAP
Knowledge of static analysis, dependency scanning, secret detection in code, vulnerability management, OWASP Top 10, OWASP API Security Top 10, OWASP Top 10 for LLM Applications and ASVS
Nice to have: experience in AdTech or other high-load environments, DevSecOps experience, experience testing LLM applications, bug bounty or CTF experience, OSWE or GWEB certification

Benefits

Comp & perks

Cafeteria benefits system allowing employees to choose benefits suited to their individual needs
Health insurance
Fully covered 10 working days of sick leave per year
5 additional day-offs per year
English and other languages compensation
Quarterly bonuses
Annual bonuses
Corporate events
Gifts
Gym at the office
Snacks in worldwide working spaces
Breakfasts and lunches in the offices