About the Company

We are an innovative technology company building cloud-native applications, API-driven platforms, and scalable digital services. Our engineering teams rely on modern cloud infrastructure, containerised workloads, and automated delivery pipelines to support reliable product development.

We are committed to embedding security into our cloud architecture and application platforms while enabling engineering teams to deliver secure, high-quality software at scale.

Role Overview

We are seeking an Application Security Engineer with expertise in cloud-native application security, API protection, and modern software delivery environments. The successful candidate will assess application and service architectures, strengthen API security controls, and collaborate with cloud and platform engineering teams to address vulnerabilities across distributed systems.

This role is suited to a security professional who understands both application-level threats and the infrastructure components supporting modern digital products.

Key Responsibilities

• Assess the security of cloud-native applications, microservices, APIs, and distributed system architectures.
• Conduct security reviews of REST APIs, GraphQL services, authentication flows, and service-to-service communication.
• Identify risks involving insecure authorisation, excessive permissions, secrets exposure, and misconfigured application components.
• Support secure implementation of OAuth 2.0, OpenID Connect, token validation, and other relevant authentication mechanisms.
• Review application deployments running on cloud platforms such as AWS, Microsoft Azure, or Google Cloud.
• Assess containerised applications and Kubernetes-based environments for application security weaknesses.
• Integrate application security scanning and dependency checks into CI/CD pipelines.
• Work with platform engineers to improve secrets management, service identity, and secure configuration practices.
• Support threat modelling for microservices, external integrations, and cloud-hosted application components.
• Evaluate software dependencies, container images, and build artefacts for vulnerabilities.
• Investigate application security incidents and support root-cause analysis and remediation.
• Develop reusable security controls, reference architectures, and implementation guidance.
• Monitor application security findings and communicate remediation priorities to technical stakeholders.
• Collaborate with engineering teams to ensure that security requirements are incorporated into product design and release processes.

Requirements and Qualifications

• Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity, or a related field, or equivalent practical experience.
• At least 3 years of experience in application security, cloud security, DevSecOps, or software engineering security.
• Strong understanding of web application vulnerabilities, API security, and OWASP guidance.
• Experience securing cloud-hosted applications and distributed service architectures.
• Knowledge of OAuth 2.0, OpenID Connect, JWT security considerations, and API access control.
• Familiarity with Docker, Kubernetes, and cloud-native deployment practices.
• Experience with CI/CD tools and security automation.
• Understanding of dependency management, secrets handling, and software supply chain security.
• Programming or scripting experience with Python, JavaScript, Go, or similar languages.
• Familiarity with cloud security services and infrastructure-as-code security tools is an advantage.
• Strong analytical skills and the ability to collaborate across distributed engineering teams.
• Professional proficiency in English; relevant cloud or security certifications are beneficial.

What We Offer

• Fully remote working arrangements.
• Competitive salary and benefits aligned with experience.
• Flexible working hours and a distributed engineering culture.
• Opportunities to work with cloud-native platforms and modern application architectures.
• Professional development and support for relevant cloud security certifications.
• Collaboration with platform engineers, architects, DevOps specialists, and product security professionals.
• Opportunities to shape application security standards and cloud security practices.
• A learning-focused environment that values innovation, ownership, and technical excellence.

Application Instructions

Candidates should submit an updated CV and a cover letter outlining their experience with application security, API protection, and cloud-native technologies.

Shortlisted applicants will be invited to a technical interview and may be asked to discuss an application security architecture or complete a practical security assessment.

We welcome candidates who are passionate about securing modern applications and building resilient cloud-based systems.

Are you interested in this position?

Apply by clicking on the “Apply Now” Button below!

#JobsHubEstonia #GlobalRecruitment
#CareerOpportunities #HiringNow
#JobSeekersNetwork #EstoniaJobs
#RecruitmentServices #EmploymentPortal.