AI-first Application Security Engineer

We are looking for an Application Security Engineer who uses AI-assisted tooling to build security into the software development lifecycle (SDLC) and reduce the number of vulnerabilities deployed to production. You will use AI to speed up security analysis, automate feedback loops, and scale secure engineering practices across teams, while applying human judgment to validate findings, make risk decisions, and guide engineers.

Responsibilities

Secure all steps of the software development lifecycle holistically, using AI-assisted analysis to identify risks early Define secure coding guidelines as part of security requirements, and implement them in CI/CD pipelines with AI-supported checks where appropriate Provide fast feedback to developers by running automated security checks in CI/CD, with AI helping to triage, prioritize, and explain results Apply practical knowledge of security tools for automated software testing (SAST, DAST, SCA, secrets detection) within CI/CD pipelines Professionally secure the software delivery process, from build to deployment Conduct secure coding awareness training and share best practices, including how to use AI coding assistants safely and securely Maintain a strong understanding of programming languages (Java, Swift) to review code and provide actionable guidance Communicate effectively with engineers to promote "security by design" Align with engineering leadership to prioritize and streamline security fixes, making remediation a positive experience for software engineers Monitor and report potential vulnerabilities, using AI to deduplicate and enrich findings and automatically create tickets Drive remediation within engineering teams and track progress to closure Develop threat models and attack trees for in-scope applications, using AI to accelerate drafting while validating outputs with domain expertise Set up and coordinate penetration tests across web and mobile (Android/iOS) applications, and track findings for remediation Support attack modeling and red teaming exercises Assist the Information Security Officer (ISO) in ensuring compliance with standards such as ISO 27001, TISAX, and GDPR Requirements 3+ years of experience in application security or similar security roles Practical knowledge of application security tooling for automated testing in CI/CD Strong understanding of Java and Swift Experience with threat modeling and attack trees Familiarity with web and mobile application security testing Practical experience using AI tools to support security engineering tasks, with awareness of their limitations and risks Strong communication skills and the ability to work with engineering leadership and development teams Excellent command of written and spoken English (B2+ level)