Application Security Engineer (f/m/d)
AWIN
Overview
As AppSec Lead, you establish and drive our Application Security program within Product & Technology. You'll evangelize AppSec, work with engineers and product managers to design secure products, and own the training and Security Champions initiatives to scale DevSecOps. You will integrate security into the SDLC, guide secure design and coding practices, and manage vulnerability lifecycle across internal and external apps. You'll stay ahead of AI/LLM security trends and contribute to incident reviews and security playbooks.
Retribuzione / Benefits
- Flexi-Week with four-day structure
- Hybrid/remote working setup
- Monthly work expense allowance and home office furniture package
- Health and wellbeing initiatives
- Awin Academy training suite for professional growth
- Peer-to-peer recognition programme
Responsabilità
- Secure the SDLC by integrating SAST, DAST and SCA into CI/CD pipelines and IDEs; automate checks to enable early fixes
- Conduct threat modeling and secure design reviews with product and engineering teams
- Provide guidance on secure coding, perform targeted code reviews, and assist with remediation
- Manage vulnerability lifecycle across internal and external apps; track and report findings
- Support bug bounty validation and present vulnerability reports to senior leaders
- Provide security guidance for AI/ML/LLM features; manage risks like prompt injection and data leakage
- Collaborate on incident investigations and post-incident mitigation strategies
- Drive security culture; deliver trainings, workshops, and contribute to playbooks and standards
- Research and innovate to reduce risks across software supply chain and showcase AI tool usage for security improvements
Requisiti fondamentali
- 5+ years in application security or related roles
- Experience collaborating with engineers and product managers to secure web apps
- Agile experience
- Excellent English communication and interpersonal skills
- Mentorship and training capabilities
- Ability to work across two departments with multiple touchpoints
- Coding proficiency in JS, PHP, Python
- Experience with Cloud Native environments (AWS), Containers and Terraform
- Hands-on experience with DAST, SAST, SCA, and reporting/dashboarding tools
- Interpersonal communication
- Mentorship and training
- Cross-functional collaboration
- SAST, DAST, SCA tooling
- CI/CD integration
- Threat modelling
Offerta di lavoro pubblicata 3 giorni fa
Offerte di lavoro simili
- ...Overview As an Application Engineer in Hitachi Energy's eMobility RCoC, you will shape high-level charging solutions for public and commercial transport. You will work with customers, sales, tendering, and engineering teams to translate needs into optimized, value-...ConsigliatoLavoro ibridoOrario flessibile
- ...this role you will provide technical and commercial support for turbomachinery control solutions within Honeywell CCC, bridging engineering and sales to win regional opportunities. You'll act as regional SME for TMC optimization, lead seminars, and coordinate with Account...ConsigliatoImpiego permanentePermesso di lavoro
- ...incontri con i clienti) insieme al Team Lead/Account Manager/Senior Engineer Identificare proattivamente soluzioni per i clienti e... ...Inglese ~ Competenze informatiche di base e uso di strumenti d'ufficio ~ Capacità di gestione degli stakeholder, scope, schedule...Consigliato
30.000 € - 45.000 €
...Brasile. Descrizione del ruolo Siamo alla ricerca di un Cyber Security Engineer per potenziamento della sede pavese. Ricerchiamo una figura... ...ai prodotti già installati sul campo, supportando l'analisi d'impatto, la pianificazione delle mitigazioni e la...ConsigliatoSmart workingLavoro ibrido- .... Lavori a stretto contatto con IT, Cloud e Cyber Security per gestire incidenti, migliorare regole e casi d'uso SIEM, contribuendo a processi di sicurezza continui... ..., Endpoint Protection) Competenze di sicurezza applicate a Unix/Linux, Windows e Solaris Conoscenza dei...ConsigliatoSmart workingLavoro ibrido
- ...Overview In this role you will lead civil activities for Grid Integration projects, coordinating with tendering and project engineering teams to ensure robust design and execution. You will support tender deliverables with documentation, estimates, and risk assessments...Orario flessibile
- ...Europe, you will drive Italian market growth by identifying and securing new business. You act as a product expert for passive... ...region Requisiti fondamentali Academic degree in Electrical Engineering or comparable qualification Minimum 2 years in a sales-driven...
- ...firewalling: installazione, configurazione e monitoraggio firewall Conoscenza degli standard internazionali per la Information Security Gradite certificazioni in ambito Network/Security Esperienza minima di 2 anni Capacità di lavoro in team, flessibilità, problem...Lavoro ibrido
- ...finalizzato alla stabilizzazione in azienda · RAL: 36 - 40 k L’offerta si intende rivolta a candidati ambosessi, nel rispetto del D.Lgs. n. 198/2006 e ss.mm.ii. e dei Decreti Legislativi n. 215 e n. 216 del 2003 sulle parità di trattamento. NAM Spa è un’Agenzia...Impiego permanenteTempo determinatoLavoro ibrido
- ...integration Responsabilità Architettura e design di Network Security basate su principi moderni, con focus su visibilità, controllo... ...Analisi degli asset di rete, topologie e flussi applicativi per definire piani di messa in sicurezza Supporto configurazione...Orario flessibile
- Overview In this role you will perform service site activities on transformers, delivering quality customer service and ensuring safety and compliance. You will work closely with the customer and cross-functional teams to identify service needs and new opportunities...Orario flessibile
40.000 € - 50.000 €
...settore Telecomunicazioni, siamo alla ricerca di un/a bNetwork Security Engineer /b da inserire all'interno della funzione Cybersecurity. /p... .../li liDisegnare e presidiare soluzioni di Network Security e Secure Access, incluse architetture SASE/security edge, accesso remoto...Impiego permanenteLavoro ibridoRemoto- .... You'll develop cost estimates, set pricing, and guide commercial discussions to maximize winning potential. This role combines engineering insight with business acumen in a global oil & gas context, enabling you to shape high-impact solutions. Responsabilità Analyze...
- ...AWS-based platform, partnering with infrastructure, operations and engineering teams to implement strong security controls across the stack. You will drive automated defenses, threat detection, and secure configurations, influencing incident response and risk remediation...
- ...Office, SAP C4C, and other service management/CRM tools ~ Ability to collaborate with cross-functional teams (Technical Support, Engineering, Operations, Sales) ~ Willingness to travel (70–80%), including international travel when needed ~ Adaptability and eagerness...
- ...Overview As a Senior Enterprise Security Architect at Akamai, you'll drive adoption of our Enterprise Security portfolio (Akamai Workforce... ...discovery, and cross-functional evangelism to enable secure, agile deployments. Retribuzione / Benefits FlexBase program...RemotoOrario flessibile
- ...support building performance through HVAC, security, and building-automation systems,... ...installation and final acceptance Prepare engineering drawings and project specifications for... ...evolutionary initiatives, evaluating applicability and cost Understand HVAC and...Temporaneo
- ...l’organico interno ci ha commissionato la ricerca di un Product engineer. /p pLa risorsa in questione, a diretto riporto del responsabile... ...pIl presente annuncio è rivolto a candidati ambosessi (l.903/77 - D.lgs n.198/2006), anche appartenenti alle categorie protette (l....Smart workingImpiego permanente
- ...Overview In this role you will perform security testing across networks, mobile and web applications, and embedded/IoT products to identify vulnerabilities and simulate attacks. You will join Spike Reply's Cyber Security Team, serving national and international clients...Orario flessibile
- ...alla manutenzione, all'automazione operativa e al supporto a conformità e audit. È un'opportunità per crescere in un team di cyber security con impatto reale sulla sicurezza aziendale. Retribuzione / Benefits ~ Modalità di lavoro ibrida (Smart Working)...Smart workingLavoro ibrido
- pKeyPartners Italy S.r.l. è alla ricerca di un Network Security Engineer da inserire nella funzione Cybersecurity. /ppLa risorsa progetterà architetture di sicurezza per reti complesse, coprendo ambienti on premise, cloud ed edge, e orchestrerà soluzioni SASE e security...Lavoro ibrido
- ...triage bug bounty submissions and external pentest findings, and propagate security insights across teams. You'll analyze issues across the codebase and infrastructure, build tooling, and mentor engineers and SOC colleagues. The position sits on the Offensive Security team...
- ...Overview Ruolo in un fornitore di servizi gestiti di cyber security: monitoraggio e analisi di eventi di sicurezza in contesti 24/7. L'incarico si inserisce nel gruppo di SOC, collaborando con team interni e clienti per mitigare minacce e migliorare le difese. Si lavora...
- ...Analizzare eventi e incidenti escalati dal livello I, correlando dati da sistemi di sicurezza Gestire e rispondere a incidenti, applicando contenimento e fornendo raccomandazioni di mitigazione Effettuare analisi approfondite delle minacce sulle telemetrie EDR per...Smart working
- ...next career step. WHAT WE ARE LOOKING FOR Firewall & Network Security Engineer | Space & European Programmes Join our client’s... ...technical security control implementation across systems and applications. Maintaining and updating technical security documentation...Impiego permanenteLavoro ibridoDisponibilità immediataLavoro da casaPermesso di lavoroOrario flessibile
Etinars
Pavia (PV)2 mesi fa - ...Overview In questo ruolo, supporti e sviluppi le attività operative del Security Operations Center per proteggere asset informatici e contrastare minacce complesse. Lavori in un contesto ibrido, collaborando con IT e Security per migliorare i processi e la postura...Lavoro ibrido
- ...(switch, AP) Conoscenza di Visio IaC e scripting per automation (Python, Ansible, Terraform, GitLab) Esperienza su Network Security (NGFW, security policies) Certificazione Cisco CCNP Enterprise Ottime capacità di problem solving, proattività e flessibilità...Smart workingLavoro ibrido
- ...critical systems. This is an opportunity to shape modern enterprise applications and grow your capabilities in a fast-evolving tech landscape.... ...Requisiti fondamentali Experience as a software engineer on complex projects Strong coding skills in Java, Python, ....Lavoro ibrido
- ...Responsabilità Lead end-to-end preparation of technical and commercial tenders as Tender Responsible Coordinate internal stakeholders (Engineering, Operations, Sourcing, Finance, Legal) to develop competitive proposals Manage customer relationships and understand...Lavoro ibridoOrario flessibile
- pMynameis cerca un Cyber Security Engineer per potenziare la sede di Pavia. La figura integra cybersecurity IT e sicurezza di prodotto, affiancando IT e team RD e assumendone gradualmente la gestione delle attività. /ppSi richiede base solida in cybersecurity, conoscenza...Lavoro ibrido
