Application Security Engineer (f/m/d)
AWIN
Overview
As AppSec Lead, you establish and drive our Application Security program within Product & Technology. You'll evangelize AppSec, work with engineers and product managers to design secure products, and own the training and Security Champions initiatives to scale DevSecOps. You will integrate security into the SDLC, guide secure design and coding practices, and manage vulnerability lifecycle across internal and external apps. You'll stay ahead of AI/LLM security trends and contribute to incident reviews and security playbooks.
Retribuzione / Benefits
- Flexi-Week with four-day structure
- Hybrid/remote working setup
- Monthly work expense allowance and home office furniture package
- Health and wellbeing initiatives
- Awin Academy training suite for professional growth
- Peer-to-peer recognition programme
Responsabilità
- Secure the SDLC by integrating SAST, DAST and SCA into CI/CD pipelines and IDEs; automate checks to enable early fixes
- Conduct threat modeling and secure design reviews with product and engineering teams
- Provide guidance on secure coding, perform targeted code reviews, and assist with remediation
- Manage vulnerability lifecycle across internal and external apps; track and report findings
- Support bug bounty validation and present vulnerability reports to senior leaders
- Provide security guidance for AI/ML/LLM features; manage risks like prompt injection and data leakage
- Collaborate on incident investigations and post-incident mitigation strategies
- Drive security culture; deliver trainings, workshops, and contribute to playbooks and standards
- Research and innovate to reduce risks across software supply chain and showcase AI tool usage for security improvements
Requisiti fondamentali
- 5+ years in application security or related roles
- Experience collaborating with engineers and product managers to secure web apps
- Agile experience
- Excellent English communication and interpersonal skills
- Mentorship and training capabilities
- Ability to work across two departments with multiple touchpoints
- Coding proficiency in JS, PHP, Python
- Experience with Cloud Native environments (AWS), Containers and Terraform
- Hands-on experience with DAST, SAST, SCA, and reporting/dashboarding tools
- Interpersonal communication
- Mentorship and training
- Cross-functional collaboration
- SAST, DAST, SCA tooling
- CI/CD integration
- Threat modelling
Offerta di lavoro pubblicata 1 giorno fa
Offerte di lavoro simili
- ...Overview As an Application Engineer in Hitachi Energy's eMobility RCoC, you will shape high-level charging solutions for public and commercial transport. You will work with customers, sales, tendering, and engineering teams to translate needs into optimized, value-...ConsigliatoLavoro ibridoOrario flessibile
- ...this role you will provide technical and commercial support for turbomachinery control solutions within Honeywell CCC, bridging engineering and sales to win regional opportunities. You'll act as regional SME for TMC optimization, lead seminars, and coordinate with Account...ConsigliatoImpiego permanentePermesso di lavoro
- ...incontri con i clienti) insieme al Team Lead/Account Manager/Senior Engineer Identificare proattivamente soluzioni per i clienti e... ...Inglese ~ Competenze informatiche di base e uso di strumenti d'ufficio ~ Capacità di gestione degli stakeholder, scope, schedule...Consigliato
30.000 € - 45.000 €
...Brasile. Descrizione del ruolo Siamo alla ricerca di un Cyber Security Engineer per potenziamento della sede pavese. Ricerchiamo una figura... ...ai prodotti già installati sul campo, supportando l'analisi d'impatto, la pianificazione delle mitigazioni e la...ConsigliatoSmart workingLavoro ibrido- .... Lavori a stretto contatto con IT, Cloud e Cyber Security per gestire incidenti, migliorare regole e casi d'uso SIEM, contribuendo a processi di sicurezza continui... ..., Endpoint Protection) Competenze di sicurezza applicate a Unix/Linux, Windows e Solaris Conoscenza dei...ConsigliatoSmart workingLavoro ibrido
- ...Overview In this role you will lead civil activities for Grid Integration projects, coordinating with tendering and project engineering teams to ensure robust design and execution. You will support tender deliverables with documentation, estimates, and risk assessments...Orario flessibile
- ...Europe, you will drive Italian market growth by identifying and securing new business. You act as a product expert for passive... ...region Requisiti fondamentali Academic degree in Electrical Engineering or comparable qualification Minimum 2 years in a sales-driven...
- Overview In this role you will perform service site activities on transformers, delivering quality customer service and ensuring safety and compliance. You will work closely with the customer and cross-functional teams to identify service needs and new opportunities...Orario flessibile
- ...firewalling: installazione, configurazione e monitoraggio firewall Conoscenza degli standard internazionali per la Information Security Gradite certificazioni in ambito Network/Security Esperienza minima di 2 anni Capacità di lavoro in team, flessibilità, problem...Lavoro ibrido
- ...integration Responsabilità Architettura e design di Network Security basate su principi moderni, con focus su visibilità, controllo... ...Analisi degli asset di rete, topologie e flussi applicativi per definire piani di messa in sicurezza Supporto configurazione...Orario flessibile
45.000 € - 65.000 €
...outsourcing) all'interno dei processi della Direzione IT utilizzando il framework di Gruppo per la gestione del rischio ICT. La vista d’insieme ingloberà anche quanto emerge nei domini più tipici dell’ambito sicurezza (cyber, resilience ecc) /liliDefinire e monitorare i...Smart workingLavoro ibrido3 giorni/sett.- .... You'll develop cost estimates, set pricing, and guide commercial discussions to maximize winning potential. This role combines engineering insight with business acumen in a global oil & gas context, enabling you to shape high-impact solutions. Responsabilità Analyze...
- p7Layers S.r.l. è un'azienda dinamica e in forte crescita, operante nel settore Cyber Security. /ppSiamo alla ricerca di un Senior Network Security Engineer che voglia unirsi al nostro team per contribuire a progetti innovativi e strategici, in un ambiente di lavoro altamente...Remoto
- ...AWS-based platform, partnering with infrastructure, operations and engineering teams to implement strong security controls across the stack. You will drive automated defenses, threat detection, and secure configurations, influencing incident response and risk remediation...
40.000 € - 50.000 €
...settore Telecomunicazioni, siamo alla ricerca di un/a Network Security Engineer da inserire all'interno della funzione Cybersecurity.... ...edge; Disegnare e presidiare soluzioni di Network Security e Secure Access, incluse architetture SASE/security edge, accesso remoto...Smart workingImpiego permanenteLavoro ibridoRemoto- ...Office, SAP C4C, and other service management/CRM tools ~ Ability to collaborate with cross-functional teams (Technical Support, Engineering, Operations, Sales) ~ Willingness to travel (70–80%), including international travel when needed ~ Adaptability and eagerness...
35.000 € - 50.000 €
...more efficient. /ppWith over 50 years of engineering excellence and a global presence, we are... ...meets innovation and customer focus, we'd love to hear from you. /ppbr/ppbYour... ...cycle of a project with in-depth /ppproduct application knowledge /pp• Technical sales support...Smart working- ...Overview As a Senior Enterprise Security Architect at Akamai, you'll drive adoption of our Enterprise Security portfolio (Akamai Workforce... ...discovery, and cross-functional evangelism to enable secure, agile deployments. Retribuzione / Benefits FlexBase program...RemotoOrario flessibile
- ...l’organico interno ci ha commissionato la ricerca di un Product engineer. /p pLa risorsa in questione, a diretto riporto del responsabile... ...pIl presente annuncio è rivolto a candidati ambosessi (l.903/77 - D.lgs n.198/2006), anche appartenenti alle categorie protette (l....Smart workingImpiego permanente
- ...KeyPartners Italy S.r.l. è alla ricerca di un Network Security Engineer da inserire nella funzione Cybersecurity. La risorsa progetterà architetture di sicurezza per reti complesse, coprendo ambienti on premise, cloud ed edge, e orchestrerà soluzioni SASE e security...Lavoro ibrido
- ...Overview In this role you will perform security testing across networks, mobile and web applications, and embedded/IoT products to identify vulnerabilities and simulate attacks. You will join Spike Reply's Cyber Security Team, serving national and international clients...Orario flessibile
- ...support building performance through HVAC, security, and building-automation systems,... ...installation and final acceptance Prepare engineering drawings and project specifications for... ...evolutionary initiatives, evaluating applicability and cost Understand HVAC and...Temporaneo
- ...Analizzare eventi e incidenti escalati dal livello I, correlando dati da sistemi di sicurezza Gestire e rispondere a incidenti, applicando contenimento e fornendo raccomandazioni di mitigazione Effettuare analisi approfondite delle minacce sulle telemetrie EDR per...Smart working
- ...Overview Ruolo in un fornitore di servizi gestiti di cyber security: monitoraggio e analisi di eventi di sicurezza in contesti 24/7. L'incarico si inserisce nel gruppo di SOC, collaborando con team interni e clienti per mitigare minacce e migliorare le difese. Si lavora...
- ...triage bug bounty submissions and external pentest findings, and propagate security insights across teams. You'll analyze issues across the codebase and infrastructure, build tooling, and mentor engineers and SOC colleagues. The position sits on the Offensive Security team...
- ...alla manutenzione, all'automazione operativa e al supporto a conformità e audit. È un'opportunità per crescere in un team di cyber security con impatto reale sulla sicurezza aziendale. Retribuzione / Benefits ~ Modalità di lavoro ibrida (Smart Working)...Smart workingLavoro ibrido
- ...high-performance computing, developing advanced power solutions that are shaping the future of electronics. /ppbr/ppAs a Field Application Engineer, you'll become the trusted technical advisor to customers, helping them bring cutting-edge designs to life. Working at the...
- ...Overview In questo ruolo, supporti e sviluppi le attività operative del Security Operations Center per proteggere asset informatici e contrastare minacce complesse. Lavori in un contesto ibrido, collaborando con IT e Security per migliorare i processi e la postura...Lavoro ibrido
- ...next career step. WHAT WE ARE LOOKING FOR Firewall & Network Security Engineer | Space & European Programmes Join our client’s... ...technical security control implementation across systems and applications. Maintaining and updating technical security documentation...Impiego permanenteLavoro ibridoDisponibilità immediataLavoro da casaPermesso di lavoroOrario flessibile
- ...(switch, AP) Conoscenza di Visio IaC e scripting per automation (Python, Ansible, Terraform, GitLab) Esperienza su Network Security (NGFW, security policies) Certificazione Cisco CCNP Enterprise Ottime capacità di problem solving, proattività e flessibilità...Smart workingLavoro ibrido
