application security engineer

Celfocus

<div>Make an impact by working for sectors where technology is the enabler, everything is ground-breaking and there&rsquo;s a constant need to be innovative.
Be part of the team that combines business knowledge, technological edge and a design experience. Our different backgrounds and know-how are key in developing solutions and experiences for digital clients.
Face challenges and learn other ways of thinking and seeing the world - there&rsquo;s always room for your energy and creativity.
About the role
Celfocus is looking to add an Application Security Analyst to join our team. 
As a part of your job, you will:<ul><li>
Conducting analysis and threat modeling for new and existing Celfocus products/projects.</li><li>
Analyzing and discussing requirements; interacting with all participants in the software development process.</li><li>
Penetration testing web applications.</li><li>
Conducting both manual and automated testing.</li><li>
Participating in the creation and development of the company's products at all stages of their life cycle.</li></ul>
What are we looking for?<ul><li>
Previous experience as a DevSecOps Security Analyst</li><li>
Profound security assurance tool knowledge</li><li>
Profound CI/CD knowledge</li><li>
Profound vulnerability knowledge</li><li>
Basic understanding of security compliance requirements</li><li>
Capability to align with teams from Analysts, Designers, Architects, Developers to DevOps.</li><li>
Knowledge of HTTP.</li><li>
Working knowledge of programming languages</li><li>
Knowledge of the Top 10 OWASP vulnerabilities: how to find, exploit and fix them.</li><li>
Knowledge of Burp Suite or other popular web scanners like ZAP, Acunetix, Netsparker, etc.</li><li>
The desire and ability to work in a team.</li><li>
The desire to develop yourself in the field of application security.</li><li>
A lively and flexible mind, clear logic, a detail-oriented approach</li><li>
Knowledge of English at least at the level of reading technical documentation.</li></ul>
Nice to have:<ul><li>
Good knowledge of Linux or Windows operating systems.</li><li>
Skills in scripting and automating your work using Powershell, Python, Bash, etc.</li><li>
Knowledge of the OWASP Application Security Verification Standard (ASVS) , OWASP Testing Guide and experience in whole product or feature planning.</li><li>
An understanding of browser security mechanisms (SOP, cookies, CSP, HSTS, etc.)</li><li>
Familiarity with various protocols and attacks against them (OAuth, JWT, websockets, etc.)</li><li>
Experience with public clouds (Azure, AWS, GCP)</li><li>
Experience with pipeline Orchestrators (Jenkins, Azure DevOps, GitLab CI/CD)</li><li>
Penetration testing experience</li></ul>
Personal traits:
Ability to adapt to different contexts, teams and Clients
Teamwork skills but also sense of autonomy
Motivation for international projects and ok if travel is included
Willingness to collaborate with other players
Strong communication skills
Believe this is you? Come join the Team! At Celfocus, we are committed to cultivate a diverse and inclusive workplace. As an equal-opportunity employer, we welcome applicants of all backgrounds, gender identities, and abilities. We are dedicated to providing reasonable accommodations for candidates with specific needs. If you require any adjustments during the selection process, please inform our Talent Acquisition Team.
Come join the Team!</div>

Application Security Engineer

Holland & Barrett International Limited

About the role: At Holland & Barrett, cybersecurity is at the heart of our digital transformation. As we continue to grow and innovate, securing our applications and protecting customer data is a top priority. We are looking for a Senior Application Security Engineer to lead our efforts in strengthening application security, mitigating risks, and ensuring best-in-class security practices. If you are passionate about cybersecurity and eager to make a real impact, we want you on our team! Key Responsibilities: <ul> <li>Security Strategy: Help define and execute the Holland & Barrett application security strategy. Collaborate with both tech and non-tech teams to integrate security principles into the early stages of product design and development.</li><li>Secure SLDC: Establish a secure Software Development Lifecycle (SDLC) that enables development teams to deliver high-quality applications quickly while implementing essential controls for software integrity, authenticity, and third-party library management.</li><li>Risk Assessments: Conduct risk assessments, threat modeling, and architecture reviews alongside development teams, producing artifacts to drive the implementation of effective security controls.</li><li>Standards Development: Own the creation and maintenance of tailored security standards and guidelines, developing reusable resources for various development teams.</li><li>Team Support: Provide guidance and support to development teams on secure software production practices and flaw mitigation strategies.</li></ul> Key requirements: Essential: <ul> <li>5+ years of experience in application security, with at least 3+ years in software development.</li><li>Strong understanding of application security concepts, including secure coding practices, threat modeling, vulnerability management, and access control mechanisms.</li><li>Experience with AWS, Kubernetes, Service Mesh, and API Security (including authentication and authorization).</li><li>Proficiency in programming languages such as Python, Java, JavaScript, GoLang, and Rust.</li><li>Familiarity with Agile methodologies like SCRUM, along with proven project management skills to oversee multiple security projects simultaneously.</li></ul> Desired: <ul> <li>Independent, proactive, and detail-oriented, with a commitment to maintaining high security standards.</li><li>Strong communication and interpersonal skills, facilitating effective collaboration with both technical and non-technical teams.</li></ul> What we offer: What we offer: Wellbeing & Lifestyle Benefits <ul> <li>Health Cash Plan </li><li>Life Assurance</li><li>Incentive Scheme - Based on company & personal performance</li><li>Virtual GP </li><li>Private Medical care</li><li>FREE at-home blood test kit </li><li>Holiday Purchase option </li><li>Pension Contribution scheme</li><li>Access to 'Wellhub' with gyms, studios and wellbeing apps </li></ul> Discounts & Savings <ul> <li>25% Colleague Discount with FREE Next Day Delivery </li><li>Exclusive Discounts from a wide range of partners </li><li>£/€50 Annual Product Allowance to spend in store </li></ul> Learning & Development <ul> <li>Access to a variety of learning opportunities, including Level 2-5 Apprenticeships, Workshops and our Digital Learning Library </li><li>AND MORE! </li></ul> Our culture respects equality, values diversity and encourages individuality - because this allows our people to unlock their potential and be their best. We welcome everyone who shares our EPIC values regardless of background, culture, disability, ethnicity, gender identity or sexual orientation Holland & Barrett does not accept unsolicited resumes from search firms/recruiters. Please do not forward resumes to our job alias, employees, or any other company location. Holland & Barrett is not and will not be responsible for any fees if a candidate submitted by a search firm/recruiter unless otherwise agreed with respect to specific open position(s).

Senior Application Security Engineer

Garanti BBVA Teknoloji

<div>
 
 
 If you have passion for technology as we do and want to be part of a great team which leads innovation in Fintech, join us.
 
 
 
 
 
 
 
 Who We Are?
 
 
 
 
 We Create World Class Financial IT Services
 
 
 
 We are a leading technology company which provides technology infrastructure, software development, big data and data analytics, internet applications, integration, system management, security management, project management and enterprise applications services to Garanti BBVA branded institutions.
 
 
 We are an agile team, developing revolutionary and innovative products. We develop emerging financial technologies and end-to-end high-tech solutions with our expert development teams.
 
 #teknolojidekitutkuyuke&scedil;fet
 
 
 
 
 
 
 
 Many reasons which will make you say I love working at Garanti BBVA Technology
 
 
 
 We have a passion for technology, we think big and we continuously explore and seek improvement, we trust the power of empowerment. We are an academy for talents. Thus, we are &ldquo;one team&rdquo; and always achieving together.
 
 
 The place we call &ldquo;our office&rdquo; has no more boundaries. We stand for a positive team culture shared and lived together and anywhere.
 
 
 
 
 
 
 So, what awaits you at Garanti BBVA Technology?
 
 
 <ul>
 <li>
 Flexible working hours,
 </li>
 <li>
 A buddy who will guide and accompany you during your onboarding process,
 </li>
 <li>
 Career development opportunities on a well-defined career path,
 </li>
 <li>
 Local and global career opportunities,
 </li>
 <li>
 A great number of online courses and technical trainings (Kamp&uuml;s Garanti BBVA, Coursera, Linkedin etc) that will support your development,
 </li>
 <li>
 Personalized development plan for you,
 </li>
 <li>
 Birthday off day,
 </li>
 <li>
 Private health and life insurance,
 </li>
 <li>
 Practice classes in English and Spanish,
 </li>
 <li>
 Discount on master programs,
 </li>
 <li>
 Online well-being program,
 </li>
 <li>
 Sabbatical leave granted for every seven years at Garanti BBVA Technology.
 </li>
 </ul>
 
 
 
 
 In addition to all these, we also meet our teammates in person in regular intervals or whenever we miss each other ❤ either in our &Idot;stanbul or Ankara offices, which are full of social opportunities and sportive activities.
 
 
 
 
 
 
 Your Impact
 
 
 
 The
 
 Customer Application Security
 
 teams work passionately to shape the technologies of the future.
 
 
 They value being a team, learning from each other and producing together. Since they are excellent teammates, they are proficient in positive interpersonal communication, taking responsibility and valuing different ideas.
 
 
 They are creative and productive. Their business is based on innovation and is only limited by their dreams. Now they are looking for new teammates with whom they will achieve together.
 
 
 
 
 
 In that team;
 
 <ul>
 <li>
 Design, develop and maintain Customer Application Authentication &amp; Authorization Frameworks &amp; Services
 </li>
 <li>
 Work within our cross functional agile teams to develop and maintain high quality applications.
 </li>
 <li>
 Design, develop and do maintenance of software applications, user interfaces and databases to satisfy business requirements.
 </li>
 <li>
 Collaborate with other teams and team members as well as some maintenance work on existing codes and learning other programming languages if necessary.
 </li>
 </ul>
 
 
 
 
 
 How do we describe the perfect match?
 
 
 <ul>
 <li>
 BS or MS in Computer Engineering or Software Engineering.
 </li>
 <li>
 At least 8 years software development experience.
 </li>
 <li>
 Experience in Java Programming, Spring Framework(Spring Boot, Spring MVC, Spring Batch).
 </li>
 <li>
 Experience of tools like Intellij, Jenkins, Sonar, BitBucket, Git, Maven.
 </li>
 <li>
 Experience of Devops Principals.
 </li>
 <li>
 Experience in webservices like REST, SOAP etc.
 </li>
 <li>
 Experience with next gen technologies like Kafka, Hazelcast is asset.
 </li>
 <li>
 Advanced SQL knowledge.
 </li>
 <li>
 Ability to develop Unit tests using frameworks like JUnit, Mockito etc.
 </li>
 <li>
 Designing, developing and maintaining software applications, user interfaces and relational databases.
 </li>
 <li>
 Strong debugging skills and ability to quickly understand other developers' code.
 </li>
 <li>
 Demonstrated ability to meet tight deadlines, follow development standards and to work independently.
 </li>
 <li>
 A passion for quality and continuous improvement of processes and software.
 </li>
 <li>
 Strong team player with collaborative mindset.
 </li>
 <li>
 Outstanding organizational, interpersonal and communication skills.
 </li>
 <li>
 Knowledge of the agile software development life-cycle and agile methodologies.
 </li>
 <li>
 Having detailed knowledge about Application Architectures and having experience this architectures in different projects
 </li>
 </ul>
 
 
 
 
 
 📢 If you would like to get to know more about Garanti BBVA Technology, please follow us on Instagram, LinkedIn, Medium and our Company Website;
 
 
 
 https://www.garantibbvateknoloji.com.tr/
 
 
 https://www.instagram.com/garantibbvateknoloji/
 
 
 https://www.linkedin.com/company/garanti-teknoloji/
 
 
 https://medium.com/@GarantiBBVATeknoloji
 
 
 
 
 
 
 &Ccedil;e&scedil;itlilik yakla&scedil;&inodot;m&inodot;m&inodot;z
 
 
 
 
 &Ccedil;e&scedil;itlili&gbreve;in g&uuml;c&uuml;ne inanan ve herkesin i&scedil;e katk&inodot;s&inodot;n&inodot; &ouml;nemseyen uluslararas&inodot; yakla&scedil;&inodot;mlar&inodot; dikkate al&inodot;yor, kapsay&inodot;c&inodot;l&inodot;&gbreve;&inodot;n i&scedil;imizin geli&scedil;mesine farkl&inodot; a&ccedil;&inodot;lardan katk&inodot; sa&gbreve;lad&inodot;&gbreve;&inodot;na inan&inodot;yoruz. &Ccedil;e&scedil;itlili&gbreve;in temsil edildi&gbreve;i kurulu&scedil;lar ba&scedil;ar&inodot;lar&inodot;n&inodot; art&inodot;r&inodot;rken, ki&scedil;ilerin kendilerine de&gbreve;er verildi&gbreve;ini hissetti&gbreve;i i&scedil; ortamlar&inodot;nda &ccedil;al&inodot;&scedil;an ba&gbreve;l&inodot;l&inodot;&gbreve;&inodot; ve verimlili&gbreve;inde daha olumlu sonu&ccedil;lar elde edildi&gbreve;ini g&ouml;r&uuml;yoruz. E&scedil;it istihdam sa&gbreve;lamay&inodot; g&ouml;rev edinen bir kurum olarak &ccedil;e&scedil;itlili&gbreve;i destekliyoruz.
 
 
 
 
 &Ccedil;al&inodot;&scedil;anlar&inodot;m&inodot;z&inodot;n mesleki ve ki&scedil;isel geli&scedil;imine f&inodot;rsat sunan, kendilerini en iyi &scedil;ekilde g&ouml;stermelerini sa&gbreve;layan, geli&scedil;imlerine odaklanan i&scedil;birlik&ccedil;i ve kapsay&inodot;c&inodot; bir &ccedil;al&inodot;&scedil;ma ortam&inodot; yaratmak i&ccedil;in yeni ad&inodot;mlar atmaya devam ediyoruz.
 
 
</div>

Customer Application Security /Architecture Engineer  (Senior Backend Developer)

Tecvity

Exfiltra is hiring a Security Engineer focused on security engineering, application security, cloud security, and penetration testing. This role is designed for practitioners who enjoy working deep in systems, code, and architecture&mdash;and who take pride in building and breaking real-world environments.This is not a SOC or blue team role.Experience Required: 6 months &ndash; 1 yearWhat You&rsquo;ll Be Working On<ul><li>Application security assessments (Web, API, Mobile)</li><li>Cloud security reviews and hardening (AWS, Azure, GCP)</li><li>Infrastructure and application penetration testing</li><li>Secure architecture design and implementation</li><li>Threat modeling and security design reviews</li><li>Collaborating closely with engineering teams to embed security into the SDLC</li><li>Converting findings into clear, practical, engineering-focused remediation guidance</li></ul>Required Skills &amp; Experience<ul><li>Strong hands-on experience in application security and penetration testing</li><li>Practical exposure to cloud security (AWS, Azure, or GCP)</li><li>Ability to understand, review, and write code (e.g., Python, JavaScript, Go, Java, etc.)</li><li>Solid understanding of:</li><li>Web &amp; API security vulnerabilities</li><li>Authentication and authorization mechanisms</li><li>Secure architecture patterns</li><li>OWASP Top 10 and modern attack techniques</li><li>Comfortable going beyond tools and automation&mdash;this is a security engineering role, not a checklist-based assessment role</li></ul>Important: This position involves regular interaction with code and architecture. Candidates who are not comfortable with coding, debugging, or technical deep-dives may find this role unsuitable. Certifications (Relevant &amp; Valued)One or more of the following is strongly preferred:<ul><li>CPTS (Certified Penetration Testing Specialist)</li><li>PNPT (Practical Network Penetration Tester)</li><li>CRT (Certified Red Team)</li><li>OSCP / OSWE or equivalent hands-on certifications</li></ul>CREST certifications will be given strong preferenceAdditional Preference<ul><li>Open-source contributors (security tools, libraries, research, or write-ups)</li><li>Candidates with a strong Capture The Flag (CTF) background, including platform-based or competitive CTF participation</li></ul>Hiring ProcessThis role involves a multi-stage vetting process, designed to assess real-world skills and problem-solving ability. Candidates should expect:<ul><li>Technical interviews</li><li>Practical security discussions</li><li>A CTF-style challenge as part of the evaluation</li></ul>We take hiring seriously and evaluate depth, not buzzwords.Who Should NOT Apply<ul><li>Candidates with SOC-focused or blue team-only backgrounds</li><li>Professionals primarily seeking alert monitoring, SIEM operations, or IR-only roles</li></ul>This role is engineering-driven, not operational monitoring.How to ApplySend your CV to: hr@exfiltra.com Subject: Security EngineerIf you enjoy engineering secure systems, breaking insecure ones, and proving your skills through hands-on challenges, this role offers strong growth, autonomy, and meaningful impact at Exfiltra.Job Type: Full-timeApplication Question(s):<ul><li>What is your current salary?</li><li>What are your salary expectations?</li><li>What is your current notice period?</li></ul>Work Location: In person

Security Engineer

Charterhouse Middle East

<div>
 
 
 Competitive Salary, Plus Family Benefits
 
 
 
 
 
 
 Charterhouse is working with a Family Office based in Abu Dhabi that is seeking to hire a Security Engineer to join their Product Support &amp; Design Division. This is a unique opportunity to work in a forward-thinking, innovation-led environment and play a critical role in securing cutting-edge digital platforms.
 
 
 
 
 
 The Security Engineer will be responsible for securing cloud environments (AWS preferred) and containerized workloads, embedding security into Git-based CI/CD pipelines, and hardening Linux systems. The role includes designing and operating layered cloud security, implementing secure patterns for orchestration, and governing software supply chain integrity through artifact and package controls.
 
 
 
 
 
 This role will also integrate automated vulnerability checks across the SDLC, manage incident response including root-cause analysis and forensics, and build telemetry pipelines feeding SIEM for actionable detection and alerting.
 
 
 
 
 
 Additional responsibilities involve defining secure-by-default architectures, enforcing policy guardrails, conducting security trainings, and enabling developer teams with practical secure coding guidance. The Security Engineer will configure and optimize WAF/CDN protections, enforce software supply chain integrity through artifact governance and SBOMs, and develop DevSecOps automation to embed security checks and guardrails into pipelines.
 
 
 
 
 
 The ideal Security Engineer will have a Bachelor&rsquo;s degree in Computer Science, Information Security, or equivalent experience, and at least three years of experience in security engineering, application security, or DevSecOps delivering engineered controls at scale.
 
 
 
 
 
 Candidates must demonstrate proficiency in at least one modern scripting or programming language for automation and integrations, experience operating CI/CD and infrastructure as code with security controls baked into pipelines, and hands-on practice with SIEM, detection engineering, vulnerability assessment, and incident response.
 
 
 
 
 
 Familiarity with industry security frameworks and benchmarks, as well as an understanding of LLM security basics, is essential. Relevant certifications such as AWS Certified Security Specialty, OSCP or OSWE, CKS, and GIAC GCSA, GCIA or GCIH certifications are strongly preferred.
 
</div>

DevSecOps Engineer

Geetha Technology Solutions

Role: Cybersecurity Engineer &ndash; Cloud &amp; Application Security Experience: 10&ndash;12 Years Work Mode: Remote Engagement: Contract to Hire (6 Months) Budget: Up to ₹24 LPAAbout the RoleWe are looking for a highly experienced Cloud &amp; Application Security Engineer to strengthen our cloud and application security posture. In this role, you will take ownership of securing AWS-based applications, microservices, and data platforms through hands-on security implementation and penetration testing.This is a critical role where your expertise will directly influence how securely our applications and cloud infrastructure operate at scale.Key ResponsibilitiesAWS Cloud Security<ul><li>Design, implement, and audit security controls across AWS services including CloudFront, ALB, API Gateway, and Route 53</li><li>Ensure secure configurations aligned with AWS best practices and compliance requirements</li></ul>Application &amp; Microservices Security<ul><li>Perform application penetration testing for web applications and microservices</li><li>Identify, prioritize, and drive remediation of vulnerabilities</li></ul>Data Platform Security<ul><li>Ensure security and compliance of the data warehouse environment, with hands-on exposure to Snowflake security features</li></ul>Vulnerability Management<ul><li>Work closely with development teams to remediate security issues</li><li>Strong focus on OWASP Top 10, API security, and common microservices vulnerabilities</li></ul>IAM &amp; Compliance<ul><li>Manage and optimize AWS IAM (roles, policies, least-privilege access)</li><li>Support regulatory and security compliance initiatives</li></ul>Required Skills &amp; Experience<ul><li>10&ndash;12 years of experience in Cloud &amp; Application Security</li><li>Strong hands-on expertise in AWS security architecture and audits</li><li>Proven experience in application penetration testing using tools like Burp Suite</li><li>Solid understanding of OWASP Top 10 and secure application design</li><li>Experience securing microservices and APIs</li><li>Exposure to Snowflake security (RBAC, data protection, access controls) is a strong plus</li></ul>Why Join This Opportunity?<ul><li>Work remotely with a highly skilled security and engineering team</li><li>Own end-to-end cloud and application security initiatives</li><li>Opportunity to convert from contract to full-time based on performance</li><li>Competitive compensation for senior security expertise</li></ul>Job Type: Contractual / TemporaryPay: ₹2,200,000.00 - ₹2,400,000.00 per yearWork Location: Remote

Hiring Cybersecurity Engineer – Cloud & Application Security

Schweitzer Engineering Laboratories

<div><div><div>Job Description</div></div><div><div><div><div>
The devices we make at SEL are embedded in the power grid. They prevent blackouts. They make outages safer and shorter in duration; they add cybersecurity, automation, and communication. They use cutting-edge technologies and operate at speeds that push other pieces of the grid to go faster. As an Application Engineer - Protection, you&rsquo;ll provide solutions and services that help our customers protect and control critical electrical infrastructure and power systems worldwide.
As Application Engineer &ndash; Protection, a typical day might include the following:<ul><li>
Develop expertise in power system protection, and all related SEL products.</li><li>
Help customers apply SEL products through visits, demonstrations, training courses, email, and telephone contact.</li><li>
Contribute to product specifications, application and testing software, and literature.</li><li>
Participate in SEL marketing and sales activities and industry technical meetings and conferences.</li><li>
Teach in customer on-site and online visits, SEL University courses, and hands-on seminars for customers and SEL personnel.</li><li>
Maintain customer application and quality information, and develop industry relationships.</li><li>
Other duties as assigned.</li></ul>
This job might be for you if:<ul><li>
Your educational background is in electrical engineering</li><li>
You have a strong understanding of power system protection principles, relay protection and control schemes, and relay coordination techniques.</li><li>
You are familiar with relevant industry standards, such as IEEE, IEC, and NERC/FERC regulations.</li><li>
You have proven experience in designing and implementing protection and control schemes in a utility or industrial setting.</li><li>
Demonstrated problem-solving skills and the ability to analyze complex power system protection challenges.</li><li>
You are willing to travel locally &amp; internationally.</li><li>
You have strong communication skills in English &amp; Arabic.</li></ul>
Location
Saudi Arabia - Khobar
Why SEL?
Competitive pay. Superior benefits. Inspiring work.
We provide and take care of our employees with outstanding benefits, competitive pay, challenging work, and a rewarding career.
Top tier medical, prescription, dental, vision, life, and disability insurance.
Varied leave plans like annual leaves, sick leaves, parental leaves etc. to maintain a healthy life balance
Yearly flight tickets to home country for expat employees and their family members based on their eligibility
Developmental programs like tuition assistance, internships, skill development courses and engineering development programs (EDP).
Wellbeing benefits like free and confidential Employee Assistance Program (EAP) and reimbursable yearly gym membership
International Travel Medical and Security Assistance to assist our traveling employees and accompanying family members worldwide
Additional compensation for working on customer sites in the field based on eligibility
Pay Range Data
We base our starting pay offer on location and job-related factors such as candidate experience, training, knowledge, and skills
Communication with Applicants
We communicate with all applicants. If you do not receive a response about your application, please check your SPAM filter or reach out to us at careers@selinc.com.
SEL is an Equal Opportunity Employer: Vets/Disabled.</div></div></div></div></div>

Application Engineer II - Protection

Search 10000+ Application security engineer jobs near you this January. New roles added regularly across leading industries. Apply today.