All vacancies
Senior Application Security Engineer (all genders)
Distribusion Technologies GmbH
Remote · worldwide, UTC+4 acceptedSalary not disclosedfull-timeVerified 4 days agoHimalayas
We are looking for our first dedicated Application Security Engineer to build our AppSec practice from the ground up. This is a greenfield opportunity with a real attack surface: public partner-facing APIs, payment flows, and active bug bounties.
Responsibilities
- Lead threat modeling and secure design reviews for high-risk changes, partner integrations, and payment flows.
- Implement, tune, and enforce security gates in GitLab CI/CD (SAST, SCA, secrets scanning, and DAST) while minimizing developer friction.
- Act as the primary technical owner for triaging, reproducing, and prioritizing findings from bug bounties, partner pentests, and automated scanners.
- Work hands-on with the DevOps team to implement GCP organizational policies, IAM least-privilege architectures, and Cloud Armor (WAF/rate limiting).
- Establish a security-champions network across engineering squads and leverage automation/AI-assisted tooling to scale code reviews effectively.
- We are a remote-first company with teams located around the Globe.
- Also, the HQ office is in Berlin, where the team often meets.
Languages
- Work format
- Remote
- Seniority
- Senior
- Posted
- 10 Sept 2026 (1w ago)
- Last verified
- 13 Sept 2026
- Apply by
- 9 Nov 2026