[Hiring] Senior Application Security Engineer @Ciklum

Role Description

As a Senior Application Security Engineer, become a part of a cross-functional development team engineering experiences of tomorrow. You will be responsible for fixing application security issues hands-on, not just reporting them. You will:

• Read the code, write the fix, and open the PR.
• Deploy, configure, and tune our SAST and SCA tooling across our CI/CD pipelines and repositories.
• Triage findings from scanners and penetration tests, and drive them to closure together with the engineering teams that own the code.
• Review pull requests and designs for security issues.
• Help build practical secure coding guidance for developers.

This is a developer-facing role rather than a ticket-filing one, so the ideal candidate is a software engineer who moved into security, or a security engineer who never stopped writing production code. You should be comfortable working in Python and Go, able to explain a finding in plain language to the developer who needs to act on it, and happy to operate the security tooling yourself rather than only consuming its output.

Qualifications

• Software development background in Python and Go.
• Hands-on AppSec experience, especially vulnerability remediation (OWASP Top 10, dependency vulns, secrets, auth/session issues).
• Direct experience deploying and operating SAST and SCA tools in CI/CD, not just consuming their output.
• Works well with developers and can explain findings in plain language.
• Available during US business hours.

Requirements

• Healthcare or other regulated-industry experience (desirable).

Benefits

• Care: your mental and physical health is our priority. We ensure comprehensive company-paid medical insurance and mental health programs, 5 undocumented sick-leave days per year.
• Tailored education path: boost your skills and knowledge with our regular internal events (meetups, conferences, workshops), Udemy license, language courses, and company-paid certifications.
• Growth environment: share your experience and level up your expertise with a community of skilled professionals, locally and globally.
• Long-term employment with 20 working-days paid vacation and local bank holidays.
• Flexibility: 100% remote work mode.
• Opportunities: we value our specialists and always find the best options for them. Our Internal Mobility Program helps change a project if needed to help you grow, excel professionally, and fulfill your potential.
• Global impact: work on large-scale projects that redefine industries with international and fast-growing clients.
• Welcoming environment: feel empowered with a friendly team, open-door policy, informal atmosphere within the company, and regular team-building events.