Senior Application Security Engineer

Arrise
Sofia
Workplace: OnsiteFull timeFunction: CybersecurityExperience: 5+ yearsSkills: ["Influence","Communication","Collaboration","Problem-solving"]

Senior Application Security Engineer responsible for defining mature secure SDLC and AppSec programs, embedding secure coding in development, conducting threat modeling, implementing security tooling in CI/CD, and managing penetration testing to protect on-prem and SaaS environments across the organization.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Arrise
Arrise
10 months ago

Senior Application Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 13 hours agoStatus: Live

Job Summary

Senior Application Security Engineer responsible for defining mature secure SDLC and AppSec programs, embedding secure coding in development, conducting threat modeling, implementing security tooling in CI/CD, and managing penetration testing to protect on-prem and SaaS environments across the organization.
Location: Sofia
Workplace: Onsite
Employment Type: Full time
Job Function: Cybersecurity

Key Responsibilities

  • •Define and mature secure SDLC and AppSec program frameworks.
  • •Embed secure coding practices into development and backend platform engineering.
  • •Lead threat modeling and high-risk security reviews for major releases.
  • •Implement application security testing tools (e.g. SCA, ASPM), container scanning, and secrets detection in CI/CD pipelines.
  • •Perform Penetration Testing and manage external penetration testing efforts

Key Requirements

  • •5+ years in application security, secure architecture, or related functions.
  • •Demonstrated ability to influence senior engineering and product leadership.
  • •Proven implementation of CI/CD security automation and secure coding practices.
  • •Strong understanding of web, API, and microservice security.
  • •Experience with Java, Javascript.
Experience:5+ yearsIGamingSoftwareTech
Skills:InfluenceCommunicationCollaborationProblem-solving
Tech Stack:JavaJavascriptCI/CDSCAASPMKubernetesContainer securityPenetration Testing

Company Brief

Arrise
Arrise provides a cloud platform that helps property owners, facilities teams and compliance managers centralize building safety, maintenance and regulatory documentation, automate inspections and workflows, and streamline reporting to reduce risk and ensure operational compliance.
Industry: Facility Management
Website