Competitive compensation: 4000-6000 EUR Gross per month
Modern digital tools for seamless collaboration.
Tangible results measured by student success.
Requirements
What we're looking for
5+ years of engineering experience, including at least 2 years focused on Application Security or Product Security.
Strong software engineering background with the ability to read, review, and write production code; Python experience is highly preferred.
Deep practical knowledge of web application security, including OWASP Top 10, ASVS, authentication and session management, OAuth2 / OIDC / SAML, and authorization issues such as IDOR and broken access control.
Experience securing multitenant or B2B SaaS products, including tenant isolation, RBAC / ABAC, and access control models.
Hands-on experience embedding security into CI/CD, including SAST, SCA, secrets scanning, container scanning, and IaC scanning.
Strong experience with threat modelling, secure design reviews, and secure code reviews in collaboration with product and engineering teams.
Experience managing vulnerabilities based on risk, criticality, and exploitability, including remediation prioritisation and escalation when needed.
Working knowledge of AWS and Kubernetes security, including IAM, secrets management, network boundaries, and workload hardening.
Strong communication skills and the ability to explain security risks clearly to engineers, product managers, and auditors.
Fluent Russian and English at B2 level or above.
Nice to have
Experience building a DevSecOps practice from scratch.
Experience running or participating in a Security Champions programme.
Hands-on penetration testing experience.
Experience securing LLM-powered or AI products.
Experience with SOC 2 or ISO 27001 from an engineering perspective.
Knowledge of software supply chain security, including SBOMs, SLSA, image signing, or similar practices.
The role
Nebius Academy (powered by TripleTen) provides assessments and training for tech companies and aspiring professionals worldwide, helping companies & individuals transform their lives through career development and acquiring the new skills needed as a tech professional.
Our focus on data science, machine learning, and generative AI helps tech-forward companies level up their employees' skills and drive innovation.
We are looking for an Application Security Engineer to own product security end to end — from threat modelling and secure design reviews to vulnerability management and security controls embedded into CI/CD.
You will work closely with product and platform teams to make security part of the engineering process, building secure defaults and helping prevent vulnerabilities from reaching production without slowing development down.
What you'll do
Own application and product security end to end, from design reviews and threat modelling to vulnerability remediation and follow-up.
Partner with product and platform teams to embed security into the development lifecycle rather than treat it as a final review step.
Build and improve security controls in CI/CD, including SAST, dependency, secrets, container, and IaC scanning.
Review application designs and code where security risk is meaningful, and turn recurring findings into secure defaults, shared libraries, lint rules, and CI gates.
Drive vulnerability management across application code and cloud posture, including triage, risk-based prioritisation, remediation timelines, and external pentest findings.
Strengthen security in multitenant B2B systems, including tenant isolation, authentication, authorization, RBAC / ABAC, and access controls.
Work on cloud and Kubernetes security across AWS environments, including IAM, secrets management, network boundaries, and workload hardening.
Help translate GDPR, SOC 2, and ISO 27001 requirements into practical engineering controls and system properties.
Develop and support a security champions programme to help engineering teams adopt secure practices in their day-to-day work.
Address security risks specific to AI and LLM-powered features, including prompt injection, data leakage, and untrusted model output.
How you'll work
Fully remote and full-time collaboration.
About TripleTen
TripleTen is an online education platform that provides intensive, cohort-based bootcamps in tech fields like software engineering, data science, and UX/UI design. The company focuses on practical, project-based learning and career support to help students transition into tech roles.
... looking for an Application Security Engineer to own product security end to end — from threat modelling and secure design reviews to vulnerability management and security controls embedded into CI/CD. You will work closely with product and platform teams to make security part of the engineering process, building secure defaults ...
... in Cybersecurity, Computer Science, or related field - 3+ years in cybersecurity, preferreably in Application Security Engineer Role - Understanding of cybersecurity frameworks and standards (ISO 27001, NIST) - Deep understanding of application security concepts and principles - Knowledge of application security tools and ...
... cripto en Europa, operamos con la máxima exigencia técnica y regulatoria. No buscamos a un generador de PDFs ni a un auditor de salón. Buscamos a un/a Cloud & Application Security Engineer con ganas de estar en el barro técnico, trabajar hombro a hombro con Ingeniería y SRE, y resolver el reto más crítico de la industria: cerrar ...
... Key engineering and product teams are based in these locales. What you won't own Application code review and threat modelling, sales questionnaires, customer security calls or other customer-facing security work. These sit with our Senior Manager, Platform Engineering today and will move into the Infosec function as business ...
Application Security Engineer Hey there, Cybersecurity Enthusiasts! At Factorial, we’re on the hunt for a skilled Application Security Engineer to join our Security Team. We need your expertise to proactively hunt for vulnerabilities and strengthen our defenses against cyber threats. If you have a passion for ethical hacking ...
Requirements What we're looking for Contributing your strengths: your qualifications - Bachelor's/Master's in Cybersecurity, Computer Science, or related field - 3+ years in cybersecurity, ideally as Data Security Engineer - Understanding of cybersecurity frameworks and standards (e.g. ISO27001, NIST, GDPR) - Strong knowledge ...
... Are you passionate about cybersecurity and eager to make a real impact in a dynamic environment? Look no further! We are on the lookout for a Senior Cloud Security Engineer who is ready to take the lead in proactively identifying and mitigating security threats and safeguarding our sensitive data. Join forces with our ...
... pace of cloud application adoption, companies are struggling to find ways to accurately assess risk and act at the speed of their business. The Staff Product Security Engineer, PSIRT position is crucial in ensuring that Okta’s systems and services meet the highest security standards and align with our customers’ requirements. ...
... voix compte. La position As an Expert DevSecOps Engineer, acting as a Software Development Security Expert, you will sit at the intersection of software and security engineering. You are accountable for designing robust software development security frameworks, handling ambiguous security and compliance requirements, managing ...