FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in application security, including vulnerability remediation, threat modeling, and security tooling integration. Proficient in managing security risks and communicating effectively with both technical and non-technical stakeholders.
Highest-signal resume keywords
Application Security EngineeringSAST IntegrationThreat ModelingVulnerability ManagementAWS Knowledge
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
JavaRubyTypeScriptOWASP ASVSOWASP Top 10AuthenticationAuthorizationInjectionJWT ValidationDependency Scanning
Soft Skills
CommunicationIncident ResponseStakeholder Engagement
Tools & Technologies
DefectDojoGitLab CIGitHub ActionsAI ToolingPenetration Testing Tools
Certifications & Qualifications
OSCPOSWEBSCP
Industry Keywords
PCI DSSGDPRSecurity Champions ProgrammeSaaSPayments
Tech Stack
Tools & technologiesAWSJavaKubernetesRubyRuby on RailsSpringTypeScript
About the role
Key responsibilities & impact- Own application security across Product Engineering and remediate vulnerabilities in codebases
- Own security tooling including secrets detection, dependency scanning, SAST, DefectDojo, and threat modelling
- Complete SAST vendor proof of concept across pilot teams and tune rules for developer trust
- Integrate findings into DefectDojo and automate team ownership, repository coverage, and pipeline-blocking rules
- Build secure defaults into shared libraries and pipeline templates for authentication, session handling, input validation, secrets, dependency, and container checks
- Run threat modelling and produce owned, dated backlog items
- Triage scanner, penetration-test, and external findings and track remediation to closure against severity SLAs
- Lead application-layer incident response, assess potential personal-data exposure with Legal, write postmortem actions, and support fraud, phishing, and customer-flagged cases
- Own penetration-testing, responsible-disclosure, security inbox, and SAST vendor relationships
- Review third-party risks and answer partner security questionnaires
- Measure and present security posture to the CTO and VP of Engineering
- Grow the Security Champions programme and coordinate quarterly security improvements
- Maintain and communicate a Now/Next/Later security roadmap
Requirements
What you’ll need- Experience as an application security engineer, or as a backend engineer who owned security for a product
- Ability to read and write production code in at least one of Java, Ruby, or TypeScript
- Knowledge of OWASP ASVS and OWASP Top 10
- Experience running threat models that produce backlog items
- Experience integrating SAST, dependency scanning, or secrets detection into GitLab CI or GitHub Actions pipelines
- Experience with vulnerability management platforms
- Understanding of authentication, sessions, authorisation, payments flows, IDOR, token and magic-link misuse, JWT validation mistakes, race conditions, injection, and device-ID collisions
- Knowledge of AWS and Kubernetes sufficient to identify application/platform security boundaries
- Ability to explain security risk to technical and non-technical stakeholders
- Ability to use AI tooling for threat modelling, code review, and unfamiliar codebases
- Nice to have: experience with marketplace, payments, or SaaS businesses handling card and personal data under PCI DSS and GDPR
- Nice to have: bug bounty, CTF, penetration-testing background, or OSCP, OSWE, or BSCP certification
- Nice to have: Security Champions programme experience
- Nice to have: OWASP DevSecOps Maturity Model or another maturity framework
- Nice to have: WAF, bot protection, secrets management, infrastructure-as-code scanning, AWS, Spring Security, Rails security internals, or custom SAST rules
Benefits
Comp & perks- 28-days holiday, plus bank holidays
- Monthly €40 Treatwell vouchers
- Mental health support through partnership with Open-Up
- Market-specific benefits discussed in the interview process