Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Tailor your resume to this Application Security Engineer (f/m/d) role.
Rezi rewrites your resume against Awin's job description. Free.
Tailor your resume to this Application Security Engineer (f/m/d) role.
Rezi rewrites your resume against Awin's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Application Security Engineer (f/m/d) posting at Awin — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Application Security Engineer (f/m/d) posting at Awin — free, in seconds.
About the Role
Establish and lead an AppSec program within the Product and Technology department, acting as an evangelist for AppSec and a trusted advisor to engineers and managers. Engage in assessing application design proposals to identify improvements and equip engineers to create secure products. Own and redesign the existing training program and create a Security Champions program to embed a DevSecOps mindset.
Responsibilities
- Secure the SDLC by integrating security tooling into CI/CD pipelines and IDEs.
- Automate and optimize security checks for early and efficient issue identification and resolution.
- Collaborate with teams during the design phase to conduct threat modeling and pre-implementation security reviews.
- Guide developers on secure coding practices and perform targeted code reviews.
- Provide actionable remediation support for vulnerabilities.
- Identify, triage, track, and report on vulnerabilities across internal and external applications and systems.
- Collaborate with engineers to efficiently close security gaps.
- Support the bug bounty process with finding validation.
- Present vulnerability management reports to department heads.
- Provide guidance on secure development of AI/LLM-powered features.
- Help teams manage risks such as prompt injection, model misuse, and data leakage.
- Lead threat modeling exercises for AI components and advise on secure integration patterns.
- Support investigation and root cause analysis of application-layer incidents.
- Contribute to post-incident reviews and longer-term mitigation strategies.
- Act as a security champion for development teams.
- Advocate for application security across engineering and product teams.
- Nurture and report on the application security training program.
- Deliver workshops and technical deep-dives on secure development practices.
- Contribute to playbooks, documentation, and internal standards.
- Stay ahead of industry threats and attack trends.
- Propose and test innovative ideas to reduce risk across the software supply chain and platforms.
- Showcase how to use AI and AI-powered tools to enhance productivity and improve security posture.
Requirements
- 5+ years in application security, product security or related technical roles.
- Experience working directly with software engineers and product managers to secure web applications.
- Experience in working within an Agile environment.
- Good working proficiency in spoken and written English.
- Excellent interpersonal skills and ability to clearly communicate at every level of the organisation.
- Mentorship and training skills.
- Ability to work across two different departments with multiple touch points.
- Coding proficiency in languages such as JS, PHP, Python.
- Experience with Cloud Native environments (AWS), Containers and Terraform.
- Hands-on experience with DAST, SAST, SCA tools, reporting and dashboarding platforms.
Skills
- Application Security
- Product Security
- Web Application Security
- Agile Methodologies
- English Proficiency
- Interpersonal Communication
- Mentorship
- Training
- Cross-departmental Collaboration
- JavaScript
- PHP
- Python
- Cloud Native (AWS)
- Containers
- Terraform
- DAST
- SAST
- SCA Tools
- Reporting
- Dashboarding
Location
- Remote
- Hybrid
Work Type
- Hybrid
- Remote
- Full-time
Experience Level
- 5+ years
Benefits
- Flexi-Week (four-day work week)
- Flexi-office (hybrid/remote working)
- Work Expense Contribution
- Remote Working Furniture package
- Health and Wellbeing initiatives
- Professional Development (Awin Academy)
- Peer-to-peer recognition programme
About the Company
- Awin is a company established in 2000 with a dynamic, social, and inclusive culture.
- The company has adapted its culture for a virtual environment through a virtual ‘Life @ Awin’ hub.
- Awin is part of the Axel Springer group.
Equal Opportunity
- Diversity & Inclusion are paramount.
- We champion uniqueness and authenticity.
- We welcome all backgrounds, identities, and experiences.
- Support is available during the application or interview process if needed.