Application Security Engineer
Summary
Designs and implements secure-by-design cloud and application architectures, integrating security controls into CI/CD pipelines and collaborating with engineering teams to protect products and services.
Sofia Stars is a fast-growing global service provider that guides high-growth businesses to success. Our range of tailored solutions includes R&D, Customer Support, Sales, KYC, Risk, and Anti-Fraud services. We make every connection shine with fresh tech and cultural understanding.
Responsibilities:
- Demonstrated ability to collaborate with other teams to achieve complex objectives.
- Responsible for security architecture design from cloud infrastructure to application through the implementation of "secure by design" principles.
- Collaborate with product managers, architects, and developers on the implementation of the security controls platform ecosystem and products.
- Proof security implementations within infrastructure and application deployment manifests and the CI/CD pipelines.
- Define required policies, controls, and capabilities for the protection of products and environments.
- Build and validate declarative threat models automation.
- Participate in engineering teams’ product planning cycles and committees.
- Oversee the product security aspects for migration of products and services from Data Center to public cloud, e.g., AWS.
- Serve as a trusted cyber security advisor to product and application teams.
Minimum Requirements:
- Experience integrating security scanning/tooling into the development pipeline.
- Experience in analysing and securing microservices and applications developed using JavaScript and Typescript.
- Experience with CI/CD pipelines (such as Gitlab, Jenkins) and infrastructure-as-a-code models (such as Terraform, Helm, or CloudFormation).
- Hands-on development experience in Python/shell scripting.
- Strong understanding of supply chain security, software integrity, and secure software delivery.
- Experience with Docker and mesh technologies (such as ISTIO).
- Experience with architecture and security reviews, threat modelling, and application risk is highly desired.
- Experience working with Agile methodologies.
- Knowledge of privacy laws and regulations, such as GDPR desired.
- Familiarity with industry regulations, frameworks, and practices. For example, PCI, ISO 27001, NIST, etc.
PREFERRED QUALIFICATIONS:
- In-depth experience with architecting secure services on Kubernetes.
- Extensive experience with architecting secure services on AWS or on-prem data centers.
- Security-related professional certifications e.g., CISSP, CISM, CCSK, CCSP, CEH, are highly desirable.
Our Excellent Benefits:
- Up to 25 vacation days
- 6 undocumented sick leaves
- Medical insurance and dental coverage
- Sport card 70% coverage (Multisport and/or CoolFit)
- Food vouchers (102 EUR)
- Appreciation gifts (birthday, wedding, newborn, etc.)
- Office massages
- Breakfast, lunch & snacks in the office
- Education budget
- Monthly team events
- Great office location
Working Model:
- This is an office-based position in Sofia, Bulgaria.
Grow fast, shine globally!
By submitting your application, you agree to our Privacy Policy.
