application security engineer in fintech

Описание

The client is a technology company building product engineering across Fintech, iGaming, and Marketing. It develops high-performing products and launches them at scale.

Задачи

• Design and implement robust security architecture from cloud infrastructure through the application layer, applying secure-by-design principles;
• Collaborate with product managers, architects, and developers to build and scale the security controls platform ecosystem;
• Validate and prove security implementations in infrastructure, application deployment manifests, and automated CI/CD pipelines;
• Define policies, controls, and capabilities to protect global products and environments;
• Build and automate declarative threat modeling to identify and mitigate application risks;
• Oversee the product security strategy for migrating legacy data center workloads to AWS;
• Serve as a trusted cybersecurity advisor to engineering and product teams;
• Participate in planning cycles and technical committees.

Требования

• Experience analyzing and securing JavaScript and TypeScript applications;
• Hands-on experience integrating security scanning and tooling into CI/CD pipelines using GitLab and Jenkins;
• Experience with Infrastructure-as-Code models such as Terraform, Helm, or CloudFormation;
• Strong development experience in Python and Shell scripting;
• Deep familiarity with Docker and service mesh technologies such as ISTIO;
• Strong background in architecture and security reviews, threat modeling, and application risk mitigation within an Agile framework;
• Strong understanding of supply chain security, software integrity, and secure software delivery;
• Familiarity with PCI-DSS, ISO 27001, NIST, and GDPR;
• Nice to have: experience architecting secure services on Kubernetes/AWS, CISSP, CISM, CCSK, CCSP, or CEH certifications.

Условия

• Competitive compensation;
• Comprehensive benefits package;
• Health coverage;
• Flexible working arrangements;
• Support for advanced certifications;
• Conference attendance;
• Research time.