Senior Application Security Engineer

Malwarebytes

. Automate security processes and tooling within the CI/CD pipeline .

Posted 10/17/2026full-timeRemote • Estonia, Italy, SpainSenior💰 €70,000 - €87,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in securing Windows applications and managing bug bounty programs, with proficiency in SAST, DAST, and SCA tooling. Capable of conducting threat modeling, code reviews, and fostering a secure development culture across teams.

Highest-signal resume keywords

Windows Application SecurityBug Bounty Program ManagementSAST, DAST, and SCA ToolingSoftware Development in C, C++, C#, or JavaGitHub Actions and Advanced Security Features

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Windows Application SecuritySAST ToolingDAST ToolingSCA ToolingSoftware Development in CSoftware Development in C++Software Development in C#Software Development in JavaCode ReviewSecurity Analysis

Soft Skills

Excellent Written CommunicationExcellent Verbal CommunicationProblem-SolvingAdaptabilityCollaboration

Tools & Technologies

GitHubGitHub ActionsAWSTerraformBug Bounty Tools

Certifications & Qualifications

CISSPCEHGIAC

Industry Keywords

Security ArchitectureDigital Forensics MethodologyRed TeamingThreat ModelingPenetration Testing

Tech Stack

Tools & technologies

AndroidAWSCloudiOSJavaMacOSTerraformC++

About the role

Key responsibilities & impact

Automate security processes and tooling within the CI/CD pipeline
Integrate SAST, DAST, and SCA tools to prevent classes of security issues
Manage collaboration with external firms on security-focused code reviews and penetration tests
Triage security findings and consult teams on severity and resolution
Support product and development teams on application security
Conduct threat modeling and design reviews
Administer and support the ongoing bug bounty program and security tools
Assist the triage team and collaborate with external researchers and the platform vendor
Work with development teams to validate reported vulnerabilities and verify fixes mitigate associated risks
Lead efforts to promote security best practices and foster a secure development culture
Focus primarily on Windows application security, contributing to macOS, iOS, and Android security as needed

Requirements

What you’ll need

Substantial experience securing Windows applications
Proficiency managing a bug bounty program
Hands-on experience with SAST, DAST, and SCA tooling
Ability to use GitHub and manage relevant GitHub Actions and GitHub Advanced Security features
Experience in code review and security analysis of desktop applications
Advanced knowledge of securing Windows desktop applications
Software development skills in C, C++, C#, or Java
Experience securing cloud services, desktop, and mobile applications
Excellent written and verbal communication skills
Ability to adapt quickly in a growing organization and solve problems collaboratively across development teams
Willingness to learn new security technologies as business needs evolve
Ability to work independently in high-risk environments with minimal supervision
Red teaming experience (nice to have)
CISSP, CEH, or GIAC certification (nice to have)
Reverse engineering (nice to have)
Hands-on experience in AWS and managing infrastructure with Terraform (nice to have)
Advanced knowledge of macOS, iOS, and Android security (nice to have)
Thorough knowledge of digital forensics methodology (nice to have)
Strong background in security architecture, system administration, and networking (nice to have)

Benefits

Comp & perks

Comprehensive medical, dental, and vision insurance coverage
Employee Referral Bonus Program
Wellness programs
Comprehensive Time Off policy
An opportunity to do something great for yourself and the world!