Application Security Engineer - Remote

Overview

Nebius is leading a new era in cloud computing to serve the global AI economy. We create the tools and resources our customers need to solve real-world challenges and transform industries, without massive infrastructure costs or the need to build large in-house AI/ML teams. Our employees work at the cutting edge of AI cloud infrastructure alongside some of the most experienced and innovative leaders and engineers in the field.

In Short

• Build and maintain ASPM tools and their rules.
• Identify, analyze, and remediate application security vulnerabilities using tools like ASPM.
• Collaborate with development teams to integrate security best practices into the software development lifecycle (SDLC).
• Conduct manual and automated penetration testing of applications.
• Develop and maintain secure coding guidelines for development teams.
• Facilitate threat modeling and risk assessments on new and existing applications.
• Stay updated on the latest security threats, vulnerabilities, and mitigation techniques.
• Serve as an application security subject matter expert to other teams.

Requirements

• 4+ years of experience in application security.
• Strong knowledge of common application security risks (e.g. OWASP Top 10) and how to mitigate them.
• Experience with secure coding practices in languages such as Python, Go, Java, or JavaScript.
• Proficiency in a common programming language (such as Go or Python) with a willingness to learn Go, if necessary.
• Hands-on experience with security testing tools (Burp Suite, ZAP, Semgrep, etc.).
• Understanding of authentication protocols like SAML or OIDC.
• Experience in conducting threat-modeling sessions.
• Strong problem-solving and analytical skills.
• Good written and verbal communication skills in English.
• Willingness to learn new things.
• Being comfortable working independently.

Benefits

• Competitive salary and comprehensive benefits package.
• Opportunities for professional growth within Nebius.
• Hybrid working arrangements.
• A dynamic and collaborative work environment that values initiative and innovation.