[Hiring] Senior Application Security Engineer @Job&Talent

Role Description

We are looking for a proactive and experienced Senior Application Security Engineer to help build secure products at scale. As a trusted partner to Engineering and Product teams, you will drive security by design across the Software Development Lifecycle (SDLC), leading initiatives such as:

• Threat modelling
• Secure code reviews
• Security automation
• Developer enablement

You will play a key role in shaping our Application Security strategy, helping us build secure, resilient products while enabling engineering teams to move fast with confidence. This is a fully remote position with flexibility within ±1 hour of CET.

Qualifications

• 3-4 years of experience in Information Security, including at least 2 years in Application Security.
• Strong experience with Secure SDLC, threat modelling, application security reviews and secure code reviews.
• Hands-on experience with SAST, SCA and automated security testing integrated into CI/CD pipelines.
• Strong knowledge of OWASP Top 10, OWASP ASVS, API Security and secure coding best practices.
• Experience implementing and managing WAF solutions, as well as conducting internal penetration testing (including APIs using Burp Suite).
• Solid understanding of Kubernetes security, cloud-native applications and networking fundamentals (HTTP, HTTPS, TCP/IP).
• Basic scripting or development experience, preferably in Python.
• Excellent communication skills, with the ability to influence engineering teams and explain complex security concepts to technical and non-technical stakeholders.

Requirements

• Act as the Application Security Subject Matter Expert (SME), partnering with Engineering and Product teams to embed security throughout the SDLC.
• Lead application security reviews, threat modelling, code reviews and penetration testing to identify and mitigate security risks.
• Design, implement and automate security controls across CI/CD pipelines, including SAST, SCA and other AppSec tooling.
• Drive the technical roadmap of the Application Security program, improving secure development practices and scaling security initiatives across the organisation.
• Improve and manage application security controls, including WAF, Kubernetes security and vulnerability management.
• Mentor Security Champions and junior engineers, promoting a strong security culture across development teams.
• Define and communicate meaningful Application Security metrics to measure risk reduction and program effectiveness.

Benefits

• Competitive pay
• Meaningful benefits
• Opportunity to shape what work looks like for millions around the globe

Company Description

Job&Talent is a world-leading, AI-powered workforce management platform for frontline industries. We help companies boost productivity and efficiency at scale, while giving workers the tools they need to thrive. Our mission is simple: to empower the people who make the world go round.

• Built on deep industry expertise, cutting-edge technology, and smart AI agents.
• End-to-end platform covers the entire workforce lifecycle — from recruitment and planning to time and attendance, performance, cost management, and communication.
• Delivers measurable improvements in fulfilment, attendance, retention, and workforce quality.
• Headquartered in Madrid, operating in 10 countries across Europe, the US, and Latin America.
• Backed by leading investors including Atomico, Goldman Sachs, Kinnevik, BlackRock, and SoftBank.