Application Security Engineer

Quick Facts

• Role: Application Security Engineer (expert, consulting & engineering)

Description

You will work in IT Security with a focus on application security—supporting secure design, development, and deployment of the bank’s systems. The role involves reviewing solutions and projects, defining application security requirements, and designing/building security mechanisms. You’ll collaborate closely with developers, architects, system owners, administrators, and other security teams, taking an end-to-end view of architecture, risks, and practical mitigations.

Responsibilities

• Review application projects, architecture, configurations, and deployment approaches for security

• Analyze technical solutions, identify security risks and vulnerabilities

• Define security requirements, recommendations, and guidance for project and development teams

• Design and develop application security supporting solutions

• Develop and use security tooling: SAST, SCA, DAST, CNAPP, and container image scanning

• Design and develop secrets management solutions (secure storage, sharing, and use by apps)

• Evaluate new tools and technologies in Application Security, AI, and DevSecOps

• Automate security checks and integrate them into software development and deployment processes

Requirements

• Experience in Application Security, Secure Software Development, or DevSecOps

• Ability to analyze application architecture and solutions from a security perspective

• Understanding of typical application vulnerabilities and how they are created; knowledge of OWASP materials (including Top 10, API Security, AI)

• Ability to turn identified risks into implementable technical recommendations

• Experience with at least part of: SAST, SCA, DAST, CNAPP, container security, or secrets management

• Understanding of CI/CD principles and integration of security controls with them

• Security mindset: focus not only on individual vulnerabilities, but also on their causes and systematic ways to reduce risk

Benefits

• Comprehensive benefits package (including medical care via LuxMed, health-related co-funding, holidays, Social Fund for Company Employees, life insurance)

• Support for pro-health activities for people with a disability certification

• Help creating individual development plans and identifying strengths (Gallup approach)

• Free access to Legimi, LinkedIn Learning, and a language learning platform

• Programs supporting employees’ health and psychophysical condition, including webinars, workshops, expert consultations, and psychological consultations

• Support for parents returning from parental leave and smoother work reintegration

• Active community involvement (e.g., organizing company units for WOŚP)

• Inclusive workplace practices and equal development opportunities