[Hiring] Senior Application Security Engineer @DataCamp

Role Description

We are looking for a Senior Application Security Engineer to join our Engineering team and own the security posture of our software and development practices. This is a hands-on role for someone with a strong software engineering background who is genuinely passionate about security - not a traditional infosec role, but one that sits at the intersection of engineering and security.

You will be our primary security expert embedded in the Engineering organization, acting as the first responder on security topics:

• Bug bounty programs
• Penetration testing
• Vulnerability management
• Security risk tracking

You will work closely with our engineering teams to embed security guardrails into our development workflows, including our growing AI-assisted and Agentic development practices.

We are ISO 27001 certified and take our compliance obligations seriously. You will play a key role in:

• Ensuring our controls remain in place
• Evolving our security awareness program
• Continuously improving the tools and practices that keep us ahead of the curve

Qualifications

• 6+ years of software engineering or application security experience, with a strong coding background
• Strong TypeScript/Node.js experience; good knowledge of Ruby on Rails, React, Kubernetes, and AWS
• Deep understanding of application security concepts: OWASP Top 10 (Web and API), vulnerability management, secure SDLC, and threat modeling
• Hands-on experience with application security tooling such as SAST, DAST, and SCA
• Experience coordinating or participating in bug bounty programs and penetration testing engagements
• Experience working within ISO 27001 or similar compliance frameworks
• Experience integrating security practices into CI/CD pipelines and developer workflows
• Able to take a security initiative from problem identification through to implementation
• Already working with AI-assisted development tools in your day-to-day workflow
• Strong communication skills
• Comfortable working across engineering teams without direct authority

Requirements

• Drive things to completion and don't wait to be pushed
• Explain complex security topics to engineers and non-technical stakeholders alike
• Communicate security risks clearly and pragmatically, without blocking delivery

Benefits

• Exciting challenges: Face new technical challenges daily, keeping your work engaging and rewarding.
• Competitive compensation: We offer a competitive salary with attractive benefits.
• Flexibility: Benefit from flexible working hours because the future is flexible!
• Continuous learning: Access a yearly learning budget for conferences & training to support your professional growth.
• Global retreats: Participate in international company retreats, fostering a global team spirit.
• Equipment: Yearly refreshment of your IT Equipment budget for your home working setup.
• Amazing team: Collaborate with a truly exceptional team—seriously, we’re awesome!