Senior Application Security Engineer
Lingokids
Posted: 10/21/2026AndroidAWSiOSJavaScriptReactReact NativeRubyTypeScript
Security Engineer, Application Security, GRC, AI
Salve.Inno
Posted: 10/19/2026Python
Senior Application Security Engineer
Malwarebytes
Posted: 10/17/2026AndroidAWSCloudiOSJavaMacOSTerraformC++
Senior Data Applications Engineer
WPT Global
Posted: 10/14/2026AWSCloudPythonReactSQLTypeScript
Battery Sales Application Engineer
Amprius Technologies, Inc.
Posted: 10/14/2026AssemblyPython
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates extensive experience in application security, particularly within mobile applications using React Native, and a solid understanding of web and API security. Proficient in integrating security tooling into CI/CD pipelines and ensuring compliance with privacy regulations such as COPPA and GDPR.
Highest-signal resume keywords
Application SecurityReact Native SecurityCI/CD Security ToolingWeb And API SecurityCOPPA And GDPR Compliance
Tech Stack
Tools & technologiesAbout the role
Key responsibilities & impact- Own application security across the React Native app, Ruby backend services and APIs, and AWS infrastructure
- Run threat modeling and design reviews with engineering squads on new features and architecture changes
- Build and maintain CI/CD security tooling, including SAST, dependency scanning, secrets detection and mobile app analysis
- Strengthen software supply chain security across third-party SDKs, open-source dependencies and build pipeline integrity
- Find, triage and fix vulnerabilities, including hands-on code work when needed
- Run or coordinate penetration tests and turn findings into fixes
- Partner with Legal and Privacy to meet COPPA and GDPR kids-privacy requirements in practice
- Raise the engineering team's security baseline through guidelines, reviews and practical training
- Participate in security incident response
Requirements
What you’ll need- 5+ years in security engineering, with a strong focus on application security in a product company
- Hands-on mobile application security experience, ideally with React Native
- Familiarity with OWASP MASVS / ASVS
- Ability to read, review and write code
- Ruby and/or JavaScript / TypeScript preferred
- Experience integrating security tooling into CI/CD pipelines
- Solid understanding of web and API security, authentication and authorization
- Judgment to prioritize real risk over theoretical findings
- Communication skills to get engineers on board
- English fluency is required
- Native iOS and/or Android security experience nice to have
- AWS security experience, including IAM, network controls and security services, nice to have
- Experience with COPPA, GDPR-K and KidSAFE, nice to have
- Software supply chain security experience, including SBOM, dependency pinning and signed builds, nice to have
- OSCP, OSWE or GWAPT certifications nice to have
- Willingness/ability to work in English in written, spoken and long-form async communication
Benefits
Comp & perks- €2,000 per year for books and training
- Stock options
- €400 home office setup allowance
- €35/month for remote work expenses
- €60/month meal allowance on Cobee card
- Flexible compensation for meal, transport and childcare expenses via Cobee
- Private health coverage at exclusive rates through Adeslas
- Free Spanish and English language classes
- Visa sponsorship, including process and costs, for those needing a visa to work in the EU
- Company events, team gatherings and off-sites in Spain
- Remote work from home anywhere in Spain or Madrid hub
- Relocation support/encouragement to make Spain a home base
ATS Keywords
✓ Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Security EngineeringCode ReviewRubyJavaScriptTypeScriptThreat ModelingVulnerability TriagePenetration TestingSoftware Supply Chain SecurityDependency Scanning
Soft Skills
Communication SkillsJudgment
Tools & Technologies
AWSSASTSecrets DetectionMobile App AnalysisOWASP MASVSOWASP ASVS
Certifications & Qualifications
OSCPOSWEGWAPT
Industry Keywords
COPPAGDPR-KKidSAFEThird-Party SDKsBuild Pipeline Integrity