Senior Application Security Engineer

Senior Application Security Engineer

As Senior Security Engineer, it is your job to ensure that the risks to our company’s systems and applications, posed by a variety of cyber threats, are addressed. You work with the engineering teams to ensure the Backbase SaaS platform is designed, built and operated based on good security principles. You work with development teams to ensure we build, deploy and maintain secure software that is used by millions of users around the globe.

What you'll do

Looking for a journey instead of a job? Then let’s talk! We are THE pioneers in banking tech. We see opportunities and take the leap. Having the guts to push limits and break barriers to make things happen. We learn and reinvent ourselves for maximum impact, never giving up. We are creators, with a customer-centric mindset that love what they do and bring fun to any challenge. Together we kick ass, have fun and feel proud when our vision is delivered. Next day - we wake up and raise the bar a little higher. Are you ready?

As a Senior Application Security Engineer you’ll take the lead in a team of security engineers working to ensure we build, maintain and deploy secure software that is used by millions of users around the globe. If you have a hacker mindset, are passionate about security and always looking to extend your knowledge, then this is the place for you.

Who you are

In order to really own this role, we think you’ll need:

• Excellent understanding of application security and common application security vulnerabilities;
• Excellent knowledge of the frontend, backend and mobile security domains;
• Good understanding of DevOps and cloud native technologies;
• Successful track record driving security initiatives;

We’ll be delighted if you bring experience in the following topics but otherwise these would be opportunities for you to grow your knowledge working in the security team:

• Implementing OWASP ASVS/M-ASVS and SKF;
• Implementing SAST, SCA, IAST and RASP tools in the SDLC;
• Assessing and implementing security maturity models;
• Facilitating threat modeling sessions with the development teams;
• Pen testing web and mobile applications;
• Training and guiding developers on application security concepts;
• Relevant regulations such as GDPR and PCI-DSS.
• A background in development and a good understanding of the SDLC;
• English language on a professional level, written and spoken.