Senior Application Security Engineer (all genders)

Responsibilities

• Lead threat modeling and secure design reviews for high-risk changes, partner integrations, and payment flows.
• Implement, tune, and enforce security gates in GitLab CI/CD (SAST, SCA, secrets scanning, and DAST) while minimizing developer friction.
• Act as the primary technical owner for triaging, reproducing, and prioritizing findings from bug bounties, partner pentests, and automated scanners.
• Work hands-on with the DevOps team to implement GCP organizational policies, IAM least-privilege architectures, and Cloud Armor (WAF/rate limiting).
• Establish a security-champions network across engineering squads and leverage automation/AI-assisted tooling to scale code reviews effectively.
• Own vulnerability management end to end: a risk-ranked backlog, remediation SLAs, an escalation path, and closing findings together with the teams.
• Scope and coordinate the annual external penetration test and produce secure-development evidence for PCI-DSS and ISO 27001.
• We are a remote-first company with teams located around the Globe and a HQ in Berlin.

Languages