About the Company

We are a security-conscious technology organisation delivering digital platforms and software solutions to customers across multiple markets. Our security function works proactively to identify application vulnerabilities, assess potential attack paths, and help engineering teams maintain robust protection against evolving cyber threats.

We promote a practical, evidence-based security approach that combines technical testing, risk prioritisation, and close collaboration with development teams.

Role Overview

We are looking for an Application Security Engineer specialising in penetration testing, vulnerability assessment, and application security validation. The successful candidate will conduct authorised security assessments of web applications, APIs, and supporting services to identify exploitable weaknesses and recommend effective remediation measures.

The ideal candidate has hands-on offensive security experience, a strong understanding of web technologies, and the ability to explain technical findings in a clear and actionable manner.

Key Responsibilities

• Conduct authorised penetration tests and security assessments of web applications, APIs, and associated services.
• Identify vulnerabilities involving broken access controls, injection attacks, authentication flaws, insecure business logic, and sensitive data exposure.
• Assess application security against recognised standards and testing methodologies, including OWASP guidance.
• Evaluate API endpoints for authorisation weaknesses, excessive data exposure, and improper request handling.
• Perform manual testing alongside automated vulnerability scanning to identify complex application weaknesses.
• Validate reported vulnerabilities and distinguish exploitable issues from false positives.
• Develop clear technical reports describing vulnerabilities, impact, evidence, severity, and remediation recommendations.
• Work with developers and system architects to explain findings and support secure remediation.
• Conduct retesting to verify that vulnerabilities have been resolved effectively.
• Support threat modelling and security reviews for high-risk application features.
• Maintain vulnerability tracking records and communicate remediation progress to relevant stakeholders.
• Contribute to improvements in penetration testing procedures, security testing coverage, and vulnerability management.
• Monitor emerging attack techniques and application security vulnerabilities relevant to the organisation’s technology stack.

Requirements and Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent practical experience.
• At least 3 years of experience in application penetration testing, offensive security, or vulnerability assessment.
• Strong understanding of web application architecture, HTTP, REST APIs, and common authentication protocols.
• Practical experience with tools such as Burp Suite, OWASP ZAP, Nmap, or comparable security testing tools.
• Knowledge of OWASP Web Security Testing Guide methodologies and common web application vulnerabilities.
• Ability to write scripts using Python, JavaScript, Bash, or similar languages.
• Understanding of secure session management, access control, cryptographic implementation, and API security.
• Experience documenting technical findings and communicating risk to both technical and non-technical stakeholders.
• Strong problem-solving skills and professional judgement.
• Professional proficiency in English and the ability to collaborate effectively with remote teams.
• Certifications such as OSCP, GWAPT, or a relevant web application security qualification are advantageous.

What We Offer

• Fully remote work from Estonia, with flexibility for eligible candidates to work from other approved locations.
• Competitive compensation based on experience and technical expertise.
• Access to professional security testing tools and training resources.
• Opportunities to assess complex applications and modern API architectures.
• Support for industry certifications and continuing professional development.
• Collaboration with experienced security engineers and software development teams.
• A culture that encourages responsible security research and continuous learning.
• Career progression into senior application security, penetration testing, or product security leadership.

Application Instructions

Please submit an updated CV and a cover letter detailing your penetration testing experience, application security expertise, and relevant certifications.

Shortlisted candidates may be invited to a technical interview and a practical assessment involving an authorised test environment.

We are committed to responsible security practices and welcome professionals dedicated to identifying and reducing application-level security risks.

Are you interested in this position?

Apply by clicking on the “Apply Now” Button below!

#JobsHubEstonia #GlobalRecruitment
#CareerOpportunities #HiringNow
#JobSeekersNetwork #EstoniaJobs
#RecruitmentServices #EmploymentPortal.