Senior Application Security Engineer

Arrise
Bucharest
Workplace: OnsiteFull timeFunction: CybersecurityExperience: 5+ yearsSkills: ["Java","Javascript","CI/CD","SCA","ASPM","Penetration Testing","Web security","APIs","Microservices","Kubernetes","Container security"]

Lead secure software development practices across on-prem and SaaS environments for an iGaming company, shaping secure SDLC, threat modeling, and vulnerability remediation. Collaborate with senior engineering and product leadership to embed secure coding, perform penetration testing, manage external assessments, and define guardrails to ensure robust application security across Java/Javascript-based microservices.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Arrise
Arrise
9 months ago

Senior Application Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 9 hours agoStatus: Live

Job Summary

Lead secure software development practices across on-prem and SaaS environments for an iGaming company, shaping secure SDLC, threat modeling, and vulnerability remediation. Collaborate with senior engineering and product leadership to embed secure coding, perform penetration testing, manage external assessments, and define guardrails to ensure robust application security across Java/Javascript-based microservices.
Location: Bucharest
Workplace: Onsite
Employment Type: Full time · Permanent
Job Function: Cybersecurity
Seniority: Sr. Manager level

Key Responsibilities

  • •Define and mature secure SDLC and AppSec program frameworks.
  • •Embed secure coding practices into development and backend platform engineering.
  • •Lead threat modeling and high-risk security reviews for major releases.
  • •Implement application security testing tools (e.g. SCA, ASPM), container scanning, and secrets detection in CI/CD pipelines.
  • •Perform penetration testing and manage external penetration testing efforts

Key Requirements

  • •5+ years in application security, secure architecture, or related functions.
  • •Proven ability to influence senior engineering and product leadership.
  • •Experience with CI/CD security automation and secure coding practices.
  • •Strong understanding of web, API, and microservice security.
  • •Experience with Java, Javascript and Penetration Testing.
Experience:5+ years
Skills:JavaJavascriptCI/CDSCAASPMPenetration TestingWeb securityAPIsMicroservicesKubernetesContainer security
Tech Stack:JavaJavascriptCI/CDSCAASPMPenetration TestingKubernetesContainersWeb securityAPIsMicroservices

Company Brief

Arrise
Arrise provides a cloud platform that helps property owners, facilities teams and compliance managers centralize building safety, maintenance and regulatory documentation, automate inspections and workflows, and streamline reporting to reduce risk and ensure operational compliance.
Industry: Facility Management
Website