Security Engineer

Solvd, Inc.

. Define and validate application and platform security controls across all delivery phases .

Posted 9/15/2026full-timeRemote • PolandMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in application security and security engineering, with a strong focus on threat modeling, API security validation, and compliance with GDPR. Proven ability to produce remediation guidance and manage security controls across complex, high-traffic platforms.

Highest-signal resume keywords

Application SecurityThreat ModelingAPI Security ValidationGDPR ComplianceVulnerability Scanning

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Authentication PatternsAuthorization PatternsSecrets ManagementToken Lifecycle ManagementEncryption StandardsSecurity LoggingIncident ResponsePenetration TestingSecurity Architecture ReviewsPrivileged Access Management

Soft Skills

Clear CommunicationCollaboration

Tools & Technologies

SIEMAEMAmplience

Certifications & Qualifications

CISSPOSCPCEH

Industry Keywords

Full-Lifecycle DeliveryHigh-Traffic PlatformsPublic-Facing APIsThird-Party Security AssessmentsPrivacy Engineering

Tech Stack

Tools & technologies

AEM

About the role

Key responsibilities & impact

Define and validate application and platform security controls across all delivery phases
Perform architecture and threat-model reviews at design stage and as the platform evolves
Review authentication, authorization, and privileged-access controls across CMS, APIs, and integrated services
Validate API and integration security across a composable, multi-vendor platform architecture
Review secrets, credentials, and token-management practices across the full stack
Support vulnerability scanning and penetration-testing activities by coordinating findings and remediation
Validate encryption and secure data handling across storage, transit, and third-party integrations
Review security logging, monitoring, and incident-response requirements
Support GDPR and privacy engineering requirements throughout delivery
Conduct third-party security assessments for integrated services and vendors
Provide remediation guidance and produce security acceptance evidence ahead of launch
Serve as the security authority on a full-lifecycle engagement for a greenfield digital news platform
Validate controls across a composable CMS, video pipeline, advertising integrations, personalisation services, and public-facing APIs
Support a platform designed to sustain extreme traffic during breaking-news events

Requirements

What you’ll need

5+ years of experience in application security, security engineering, or a closely related role
Experience performing threat modelling and architecture security reviews on complex, multi-component platforms
Strong knowledge of authentication and authorization patterns, including OAuth, OIDC, RBAC, and privileged access management
Hands-on experience validating API security and reviewing integration patterns across third-party services
Solid understanding of secrets management, credential handling, and token lifecycle best practices
Experience supporting or coordinating vulnerability scanning and penetration testing programmes
Knowledge of encryption standards and secure data handling practices across storage and transit
Familiarity with GDPR and privacy-by-design engineering requirements
Ability to produce clear remediation guidance and security acceptance documentation for engineering and delivery teams
Experience securing composable CMS or media platform architectures — AEM, Amplience, or similar
Background working on high-traffic, public-facing platforms where availability and security intersect
Experience with security logging and monitoring tooling, including SIEM, alerting, and incident response playbooks
Familiarity with third-party vendor security assessment processes
Relevant certification such as CISSP, OSCP, CEH, or equivalent
Experience working within a phased, full-lifecycle delivery programme alongside engineering and architecture teams
Legal right to work in the country where the role is based
English proficiency level of A1-A2, B1-B2, C1-C2, or Native

Benefits

Comp & perks

Equal opportunity employer
Opportunities to work on real-world AI-driven projects across key industries
Collaboration with a global team across continents and cultures
Inclusive environment prioritizing continuous learning, innovation, and ethical AI standards