Application Security Engineer - Remote

Overview

Your role is to establish and lead an AppSec program within the Product and Technology department, acting as an evangelist for AppSec, trusted by engineers and managers alike. As a member of the core security team, you will engage in assessing application design proposals, to identify improvements to enable our engineers to create secure products. You will own the existing training program, redesign it to better equip engineers with the knowledge needed to develop secure applications, and create a Security Champions program to scale and embed a DevSecOps mindset across P&T.

In Short

• Secure the SDLC by integrating security tooling into CI/CD pipelines.
• Conduct threat modelling sessions and pre-implementation security reviews.
• Guide developers on secure coding practices and perform code reviews.
• Manage the vulnerability lifecycle and collaborate with engineers.
• Provide guidance on secure development of AI/LLM-powered features.
• Support investigation and root cause analysis of application-layer incidents.
• Stay ahead of industry threats and propose innovative risk reduction ideas.
• Mentor and train engineers on security best practices.

Requirements

• 3+ years in application security or related technical roles.
• Experience working directly with software engineers and product managers.
• Experience in Agile environments.
• Proficiency in JS, PHP, Python, and Terraform.
• Experience with Cloud Native environments (e.g., AWS) and Containers.
• Hands-on experience with DAST, SAST, and SCA tools.
• Excellent interpersonal skills and clear communication abilities.
• Mentorship and training skills.

Benefits

• Flexible four-day work week with full pay.
• Hybrid/remote work possibilities across Awin regions.
• Access to health and wellness initiatives.
• Extensive training suite for professional and personal development.
• Monthly remote working allowance.
• Peer-to-peer appreciation program.