Senior Security Engineer, Application Security (Remote - EMEA) at Jobgether

, , United Kingdom -

Full Time

Start Date

Immediate

Expiry Date

10 Jan, 26

Salary

0.0

Posted On

12 Oct, 25

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Application Security, DevSecOps, Threat Modeling, Vulnerability Research, Penetration Testing, Ruby on Rails, Go, Shell Scripting, OWASP Top 10, CVSS Scoring, Brakeman, BurpSuite, Problem-Solving, Communication, Collaboration, Innovation

Industry

Internet Marketplace Platforms

Description

This position is posted by Jobgether on behalf of a partner company. We are currently looking for a Senior Security Engineer, Application Security in EMEA. As a Senior Security Engineer, you will play a key role in ensuring that all software development initiatives meet the highest security standards. You will collaborate closely with development, product, and infrastructure teams to identify, assess, and mitigate potential security risks across applications and systems. This role offers the opportunity to work on cutting-edge DevSecOps technologies, build innovative tools that enhance application security, and shape secure development practices across the organization. You will thrive in a collaborative, remote-first environment where innovation, autonomy, and impact are valued. Accountabilities: Conduct comprehensive application security reviews, including architecture analysis, threat modeling, and code review. Identify vulnerabilities, propose remediation strategies, and demonstrate potential exploitation in controlled environments. Define and promote secure development practices to enable product and engineering teams to build secure features efficiently. Strengthen software supply chain security by improving workflows, controls, and monitoring processes. Contribute directly to product improvements through feedback on platform capabilities and customer-facing features. Lead initiatives to enhance the maturity, scalability, and automation of security processes, metrics, and workflows. Bachelor’s degree in Computer Science or equivalent practical experience. 5+ years of professional experience in IT, technical support, or engineering with strong security focus. Solid understanding of application security principles, OWASP Top 10 vulnerabilities, STRIDE, CVSS scoring, and threat modeling. Proficiency in one or more programming languages, ideally Ruby on Rails or Go, and comfort with shell scripting. Experience conducting application penetration testing or vulnerability research (SQLi, XSS, CSRF, SSRF, etc.). Familiarity with tools such as Brakeman and BurpSuite and common security libraries for Ruby on Rails. Excellent written and verbal communication skills in English, with the ability to collaborate across technical and non-technical teams. Strong problem-solving skills, initiative, and ability to work effectively in a remote, asynchronous environment. Fully remote and asynchronous work model. Competitive compensation with equity participation and stock purchase options. Comprehensive health, wellness, and financial benefits. Flexible paid time off and generous parental leave. Growth and professional development budget. Inclusive team culture supported by resource groups and continuous learning opportunities. Home office setup support to ensure optimal productivity. Jobgether is a Talent Matching Platform that partners with companies worldwide to efficiently connect top talent with the right opportunities through AI-driven job matching. When you apply, your profile goes through our AI-powered screening process designed to identify top talent efficiently and fairly. 🔍 Our AI evaluates your CV and LinkedIn profile thoroughly, analyzing your skills, experience, and achievements. 📊 It compares your profile to the job’s core requirements and past success factors to determine your match score. 🎯 Based on this analysis, we automatically shortlist the 3 candidates with the highest match to the role. 🧠 When necessary, our human team may perform an additional manual review to ensure no strong profile is missed. The process is transparent, skills-based, and free of bias — focusing solely on your fit for the role. Once the shortlist is completed, we share it directly with the company that owns the job opening. The final decision and next steps (such as interviews or additional assessments) are then made by their internal hiring team. Thank you for your interest! #LI-CL1

Responsibilities

Conduct comprehensive application security reviews and identify vulnerabilities while proposing remediation strategies. Collaborate with development and engineering teams to define secure development practices and enhance security processes.