application security engineer in fintech

Stellenbeschreibung:

Описание

The client is a technology company building product engineering across Fintech, iGaming, and Marketing. It develops high-performing products and launches them at scale.

Задачи

Design and implement robust security architecture from cloud infrastructure through the application layer, applying secure-by-design principles;
Collaborate with product managers, architects, and developers to build and scale the security controls platform ecosystem;
Validate and prove security implementations in infrastructure, application deployment manifests, and automated CI/CD pipelines;
Define policies, controls, and capabilities to protect global products and environments;
Build and automate declarative threat modeling to identify and mitigate application risks;
Oversee the product security strategy for migrating legacy data center workloads to AWS;
Serve as a trusted cybersecurity advisor to engineering and product teams;
Participate in planning cycles and technical committees.

Требования

Experience analyzing and securing JavaScript and TypeScript applications;
Hands-on experience integrating security scanning and tooling into CI/CD pipelines using GitLab and Jenkins;
Experience with Infrastructure-as-Code models such as Terraform, Helm, or CloudFormation;
Strong development experience in Python and Shell scripting;
Deep familiarity with Docker and service mesh technologies such as ISTIO;
Strong background in architecture and security reviews, threat modeling, and application risk mitigation within an Agile framework;
Strong understanding of supply chain security, software integrity, and secure software delivery;
Familiarity with PCI-DSS, ISO 27001, NIST, and GDPR;
Nice to have: experience architecting secure services on Kubernetes/AWS, CISSP, CISM, CCSK, CCSP, or CEH certifications.