Application Security Engineer
The role involves performing application security assessments and code reviews. It also includes conducting threat modelling during architecture and design phases. The engineer will support development teams in the remediation of security issues and validate vulnerabilities, conducting vulnerability triages. Close collaboration with developers and DevSecOps engineers is expected.
- Track security findings and ensure timely remediation.
- Perform application security assessments and code reviews.
- Conduct threat modeling during architecture and design phases.
- Support development teams in remediation of security issues.
- Validate vulnerabilities and conduct vulnerability triages.
- Work closely with developers and DevSecOps engineers.
- 3+ years of Application Security, Product Security or Offensive Security experience (required)
- Strong understanding of common vulnerability classes, their root cause and remediation processes (required)
- Knowledge of Docker and basic Kubernetes concepts (required)
- Experience with at least one SAST/DAST/SCA solution (required)
- Experience performing manual security testing (required)
- Experience in offensive security/penetration tests (required)
- SAST/DAST/SCA tooling (required)
- Configuring CI/CD pipelines (required)
- Experience with opensource security tools (required)
- Experience with LLMs and integrating them into workflows (nice-to-have)
- Transparency and not being afraid to ask (required)
- Being proactive and not reactive (required)
- Understanding of engineering tasks from a business perspective (required)
- Task and priority management (required)
- An exciting and challenging job in a fast-growing business group.
- Opportunity to be part of a multicultural team of top professionals.
- Great working atmosphere with a friendly culture and success-driven mindset.
- Beautiful offices in Warsaw, Limassol, and Yerevan with the option to work remotely or on-site.
- Modern corporate equipment based on macOS or Windows.
- Paid vacations, sick leave, personal events days, and days off.
- Corporate health insurance program.
- Referral program with bonuses.
- Educational programs including regular internal training, compensation for external education, and attendance of specialized global conferences.
- Rewards program for mentoring and coaching colleagues.
- Free internal English courses.
- In-house Travel Service.
- Access to an online platform for employees with quests, gamification, and RedCore clubs for hobbies.
- Corporate events and team buildings.
PIN-UP Global is an international holding company that develops technologies, B2B solutions and products for the iGaming industry. Headquartered in Warsaw, the group brings together businesses spanning product development, technology and marketing services for online gaming. It supports a portfolio of companies and brands operating across multiple markets. PIN-UP Global focuses on building advanced technology and products for the gambling sector.