Application Security Engineer

SNI Show all offers

Wrocław

20 hours ago

In short

SNI seeks an Application Security Engineer in Wrocław. Responsibilities include secure coding support, vulnerability assessments (SAST, DAST, SCA), threat modeling, CI/CD security integration, and training. Requires 2-5 years of appsec experience, familiarity with AppSec tools, OWASP standards, and Python/Java/.

NET scripting.

Keywords

SAST DAST SCA OWASP CI/CD DevSecOps Python Java .NET

AI-written summary based on the listing content.

SNI is serving as a trusted IT Outsourcing partner in line with the needs of World's most prestigious firms and carried out successful projects worldwide.

Responsibilities:

Support development teams in adopting secure coding practices and embedding security throughout the full software development lifecycle (SDLC).
Execute and evaluate security assessments using SAST, DAST, and SCA tooling to identify, prioritize, and remediate application vulnerabilities.
Contribute to threat modeling, architectural design reviews, and the implementation of established security patterns.
Integrate and optimize automated application security testing tools and quality gates within CI/CD pipelines (DevSecOps).
Develop and deliver security awareness programs, training materials, and practical implementation guidelines for engineering teams.
Assist product and platform teams in aligning with internal security policies, industry baselines, and regulatory compliance standards.
Continuously refine application security tooling, triage workflows, and vulnerability management processes to boost developer efficiency.
Communicate vulnerability findings, risk implications, and practical remediation strategies clearly to both technical and non-technical stakeholders.

Skills:

2–5 years of hands-on experience in application security, software security engineering, or secure software development.
Practical experience operating and configuring AppSec tools such as Semgrep, SonarQube, HCL AppScan, OWASP ZAP, Black Duck, Sonatype Lifecycle, or equivalent solutions.
Solid understanding of core web/API vulnerability classifications and standards, including OWASP Top 10, OWASP ASVS, and CWE.
In-depth familiarity with Static Application Security Testing, Dynamic Application Security Testing, and Software Composition Analysis.
Intermediate hands-on programming or scripting capabilities in languages such as Python, Java, or .

NET to review application code and automate security tasks.

Familiarity with CI/CD systems, containerized environments, and cloud-native application security.
Proven ability to manage vulnerability triage, risk scoring, and tracking issues through remediation.
Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Security, or equivalent practical industry experience.

Nice to have:

Hands-on experience conducting threat modeling sessions and architectural security design reviews.
Familiarity with maturity models and governance frameworks such as NIST, OWASP SAMM, or OWASP DSOMM.
Awareness of emerging software security regulations, such as the EU Cyber Resilience Act.
Recognized industry certifications such as CSSLP, CEH, CompTIA Security+, AWS/Azure Security, or GIAC credentials.

PLCY2608