About the Company

We are a technology-driven organisation developing secure, scalable digital products for customers across European and international markets. Security is central to our engineering culture, and we invest in secure software development practices to protect customer information, maintain system reliability, and reduce application-level vulnerabilities.

Our distributed engineering teams work collaboratively to build resilient applications while continuously improving our security standards, development workflows, and technical architecture.

Role Overview

We are seeking an experienced Application Security Engineer to integrate security into the software development lifecycle. The successful candidate will work closely with software engineers, architects, DevOps specialists, and product teams to identify vulnerabilities, strengthen application security controls, and establish secure coding practices.

This role is ideal for a security professional with a strong software engineering foundation and practical experience embedding security into modern development environments.

Key Responsibilities

• Integrate security requirements and testing activities into the software development lifecycle.
• Conduct application security reviews of source code, application architecture, APIs, and authentication mechanisms.
• Identify and assess vulnerabilities, including injection flaws, broken access controls, insecure deserialisation, and authentication weaknesses.
• Implement and maintain static application security testing (SAST) and software composition analysis (SCA) tools.
• Support dynamic application security testing (DAST) and coordinate remediation of identified vulnerabilities.
• Develop secure coding standards, engineering guidelines, and reusable security patterns.
• Collaborate with developers to resolve vulnerabilities and validate remediation measures.
• Review third-party libraries, dependencies, and open-source components for known security risks.
• Integrate security checks into CI/CD pipelines and development workflows.
• Support threat modelling and security architecture reviews for new features and services.
• Track application security findings, remediation deadlines, and risk acceptance decisions.
• Provide security training and practical guidance to engineering teams.
• Monitor emerging application vulnerabilities and recommend improvements to security controls.

Requirements and Qualifications

• Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity, or a related discipline, or equivalent practical experience.
• At least 3 years of experience in application security, software engineering, or product security.
• Strong understanding of the OWASP Top 10 and secure software development principles.
• Experience with one or more programming languages, such as Java, Python, JavaScript, TypeScript, or C#.
• Practical knowledge of SAST, DAST, SCA, and code review methodologies.
• Understanding of authentication, authorisation, session management, cryptography, and API security.
• Experience integrating security tools into CI/CD pipelines.
• Familiarity with Git, automated testing, and modern software development workflows.
• Strong analytical, troubleshooting, and technical communication skills.
• Professional proficiency in English and the ability to work independently in a remote environment.
• Relevant certifications such as CSSLP, OSWE, or equivalent qualifications are advantageous.

What We Offer

• Fully remote working arrangements.
• Competitive salary based on skills and experience.
• Flexible working hours and a distributed engineering environment.
• Access to modern security testing and development tools.
• Professional development opportunities and support for relevant certifications.
• Collaboration with experienced software engineers, architects, and security specialists.
• Opportunities to influence secure engineering standards and product security strategy.
• A supportive culture focused on technical excellence and continuous improvement.

Application Instructions

Interested candidates should submit an updated CV and a cover letter highlighting their application security experience, programming background, and approach to secure software development.

Shortlisted candidates will be contacted for an interview and may be asked to complete a technical assessment or discuss a practical application security scenario.

We welcome candidates who are passionate about building secure software and improving security throughout the development lifecycle.

Are you interested in this position?

Apply by clicking on the “Apply Now” Button below!

#JobsHubEstonia #GlobalRecruitment
#CareerOpportunities #HiringNow
#JobSeekersNetwork #EstoniaJobs
#RecruitmentServices #EmploymentPortal.