Company Overview

The organization operates in the financial technology industry, developing digital financial applications and software infrastructure that support payment services, online financial accounts, and interconnected banking solutions.

Its technology environment includes customer-facing applications, backend services, cloud infrastructure, and third-party integrations. Protecting these systems against software vulnerabilities and unauthorized access is an important part of maintaining reliable financial services.

The organization brings together application developers, security engineers, infrastructure specialists, and financial technology professionals to strengthen the security of its digital platforms and support responsible technology development.

Role Summary

The Fintech Application Security Engineer will strengthen the security of financial applications by identifying software vulnerabilities, reviewing application architecture, and integrating security controls into the software development lifecycle.

The role focuses on application security assessments, secure coding practices, vulnerability management, and the protection of sensitive financial information across digital platforms.

The successful candidate will collaborate with software developers, DevOps engineers, infrastructure teams, and security specialists to identify potential threats and implement practical improvements to application security.

This position requires hands-on experience in application security engineering and a solid understanding of modern software development environments. The ideal candidate will be capable of evaluating application vulnerabilities, recommending remediation measures, and helping engineering teams build secure financial technology products.

Key Responsibilities

• Conduct application security assessments across web applications, backend services, and financial technology platforms.

• Identify vulnerabilities in application code, authentication mechanisms, APIs, and third-party integrations.

• Perform secure code reviews and recommend improvements to development practices.

• Assess application security risks using recognized frameworks such as OWASP Top 10.

• Evaluate authentication, authorization, session management, and access control mechanisms.

• Support the implementation of secure API communication and data protection controls.

• Integrate security testing tools into CI/CD pipelines and software development workflows.

• Conduct vulnerability assessments and coordinate remediation activities with engineering teams.

• Review application dependencies and identify risks associated with outdated or vulnerable software components.

• Support threat modelling exercises during the design and development of new financial applications.

• Evaluate security controls protecting customer information, financial records, and transaction data.

• Assist with security testing of cloud-hosted applications and distributed software environments.

• Maintain documentation covering identified vulnerabilities, remediation progress, and application security standards.

• Collaborate with developers to improve secure coding awareness and application security practices.

• Participate in incident investigations involving application-level vulnerabilities or suspicious software behaviour.

• Monitor emerging application security threats and recommend relevant improvements to existing controls.

Requirements and Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Software Engineering, or a related technical discipline.

• At least three years of experience in application security, software security engineering, or penetration testing.

• Strong understanding of web application security principles and common software vulnerabilities.

• Practical knowledge of OWASP Top 10 and secure software development practices.

• Experience with application security testing tools such as Burp Suite, OWASP ZAP, or SAST/DAST platforms.

• Understanding of REST APIs, authentication protocols, authorization, and access management.

• Familiarity with programming languages such as Python, Java, JavaScript, or C#.

• Experience reviewing application code and identifying security weaknesses.

• Knowledge of cloud security concepts and containerized application environments.

• Understanding of encryption, secure data transmission, and sensitive information protection.

• Familiarity with Git-based development workflows and CI/CD pipelines.

• Strong analytical and investigative abilities.

• Excellent technical documentation and communication skills.

• Relevant security certifications or additional training are advantageous.

Benefits

• Fully remote working arrangement within Estonia.

• Competitive compensation based on experience and technical expertise.

• Opportunity to strengthen the security of modern financial technology applications.

• Professional development in application security, cloud security, and secure software engineering.

• Exposure to payment systems, digital banking infrastructure, and financial software platforms.

• Collaboration with experienced software engineering and cybersecurity professionals.

• Access to modern security testing tools and technical development resources.

• Opportunity to contribute to security architecture and software quality improvements.

Application Instructions

Interested candidates should submit an updated CV highlighting their experience in application security, vulnerability assessment, secure software development, or cybersecurity engineering.

Applications should include relevant technical experience with security testing tools, API security, code reviews, and vulnerability remediation. Candidates who have worked with payment applications, digital banking platforms, or other financial technology systems are encouraged to apply.

Apply by clicking on the “Apply Now” Button below!

#JobsHubEstonia #GlobalRecruitment
#CareerOpportunities #HiringNow
#JobSeekersNetwork #EstoniaJobs
#RecruitmentServices #EmploymentPortal.