Application Engineer

• Own application security for code, dependencies, APIs, and the software development lifecycle behind Canvas, Mastery, and Parchment
• Classify security risk in context and drive risk reduction
• Hand off residual risk to the risk management program with documented rationale
• Triage vulnerabilities, adjudicate severity, and partner with engineering teams to complete remediation
• Design and implement compensating controls when direct remediation is not possible
• Investigate false positives and document suppression decisions
• Build and maintain CI/CD security automation, pipeline gates, and checks
• Install, configure, integrate, and maintain application security tooling and data pipelines
• Conduct threat modeling with product and engineering teams
• Perform secure code reviews and review technical specifications against the security rubric
• Own SAST/SCA pipeline coverage, signal quality, and developer experience using Snyk, CodeQL, and Wiz Code
• Build secure-default shared libraries and patterns
• Enable developers through training, documentation, office hours, and design consultation
• Support bug bounty researcher communication and triage with the offensive security engineer
• Conduct recurring risk reviews with product leadership and translate technical risk into business impact
• Participate in security on-call rotation and provide subject-matter expertise during major incidents escalated beyond L2

Application Engineer jobs in Hungary

Senior Application Security Engineer