Application Security Engineer

Application Security Engineer at AdTech Holding, Cyprus (relocation support), 3+ years experience, salary €3,000-5,000.

Tasks: • Security review of services, integrations, and public APIs before release, including manual review of critical code. • Threat modeling of new features with product teams at the design stage. • Checks in the development cycle: static analysis, dependencies, secret scanning — coverage, rules, analysis of findings with teams. • Creating a unified vulnerability management process: registry, priorities, SLA, retest, bug bounty. • Ensuring security of AI integrations and access rules for technical and agent accounts. • Conducting penetration tests and audits: setup, acceptance, driving findings to systematic fixes. • Developing and maintaining standards and practices for developers: secure development requirements, guidelines, team training.

Requirements: • 3+ years of experience in application security: code and architecture review, SAST, DAST, SCA, OWASP. • Strong manual testing skills and work with static analysis, including writing custom rules. • Understanding of authorization mechanics: OAuth, OIDC, JWT, scope tokens, rights delegation. • Ability to read code in PHP, Go, and JavaScript and automate tasks in Python or Bash. • Ability to achieve results from teams without direct subordination, including through security champions. • Interest in LLM application security: prompt injection, agent access to data. • Russian and English at a working level.

Location: Cyprus (relocation support). Salary: €3,000-5,000.