Application Security & Quality Specialist

Quick Facts

Application Security & Quality Specialist role focused on improving application security processes and integrating security testing into the software delivery lifecycle.

Description

Help set up and evolve end-to-end secure development practices—from integrating security tools into the development workflow, to evaluating vulnerabilities and coordinating their remediation with developers. Establish and assess security control coverage across SAST, DAST, and SCA, prioritize vulnerabilities, support SBOM creation and management, and help meet Cyber Resilience Act (CRA) and related security requirements. Provide regular reporting on vulnerability and security control status.

Responsibilities

• Develop and improve security testing processes within the software development lifecycle
• Perform and coordinate security analyses of applications and development processes
• Implement and manage vulnerability detection tools for applications and dependencies
• Set up and evaluate security controls (SAST, DAST, SCA)
• Analyze vulnerabilities, prioritize them, and propose remediation actions
• Work with developers to remove security issues
• Set up processes for creating and managing SBOM (Software Bill of Materials)
• Create core methodologies, standards, and recommendations for secure development
• Support compliance with Cyber Resilience Act (CRA) and other relevant security requirements
• Provide regular reporting on vulnerability status and security controls

Requirements

• Understand Secure SDLC principles and application security; apply them to daily development team practices
• Knowledge of OWASP Top 10 and common application vulnerabilities
• Ability to work with CVE and CVSS and manage vulnerabilities correctly
• Ability to analyze security risks and propose appropriate mitigation measures
• Familiarity with SAST, DAST, and SCA methodologies
• Experience with CI/CD processes
• Experience with Git and common development workflows
• Ability to integrate security checks into the development process
• Ability to read source code, ideally in Java
• Effective communication with developers and management

Benefits

• Flexible work arrangement with a mix of office and home office, free days, sick days
• Meal allowance
• Company contribution to pension savings, MultiSport card
• English lessons and support for further education
• Company events and teambuildings in a friendly atmosphere