Sr. Application Security Engineer

We are looking for a Sr. Application Security Engineer, who will be responsible for aligning our Software Development Life Cycle with security best practices, conducting security assessments on code changes and in general maturing our application security framework, processes and toolsets.
There are currently no fully remote or relocation opportunities to Tallinn, Estonia for this role.

Responsibilities

• Own the application security capability
• Drive the technical direction and roadmap of the application security program
• Lead application security reviews and threat modeling, including code reviews and dynamic testing
• Collaborate with development teams to prepare application security code fixes
• Implement and scale automated security testing to validate that secure coding best practices are being used
• Enable secure development practices through training

Skills

• Familiarity with common security libraries, security controls, and common security flaws
• Development or scripting experience and skills (Node.js and Java are preferred)
• Experience with OWASP, static/dynamic analysis, and common security tools
• Experience identifying security issues through code review
• Familiarity with securing applications built on cloud computing environments (AWS preferred)
• Understanding of authorization frameworks (OAuth and JWT)
• Experience working with source control (git, github, bitbucket etc.)
• Experience integrating application security functions into CI/CD processes

Why You'll Love It Here

• Play an instrumental role in reshaping one of the oldest industries in the world
• Competitive salary and meaningful early stage equity
• Healthcare benefits with medical, dental and vision coverage
• Monthly catered lunches and happy hours
• Company paid learning and development assistance
• Flexible working hours and the option to work from home when necessary
• Company supported mentorship program
• Grow in a collaborative, respectful, and empathetic culture