Lionhires

Discussion

Senior Application Security Engineer

Summary

Senior Application Security Engineer embeds secure-by-design practices into cloud infrastructure and microservices, automating threat modeling and supply chain security while guiding engineering teams in a high-scale AWS environment.

About the Role

Are you a cybersecurity champion who thrives on embedding "secure by design" principles into cutting-edge cloud infrastructure and microservices? We are looking for a Senior Application Security Engineer to act as a trusted advisor, driving the evolution of secure product engineering from legacy data centers to AWS. If you want to own threat modeling automation, champion supply chain security, and influence engineering roadmaps in a high-scale environment, this is your next big move.

About the Client

Our partner is a tech company building product engineering across Fintech, iGaming, and Marketing. They turn innovative ideas into high-performing engines and launch them at scale. As their exclusive recruitment partner, Lionhires manages their full-cycle talent acquisition, connecting top-tier tech talent with this fast-growing ecosystem.

What You Will Do

  • Design and implement robust security architecture spanning from cloud infrastructure down to the application layer, ensuring "secure by design" principles are met.

  • Collaborate closely with product managers, architects, and developers to build and scale the security controls platform ecosystem.

  • Validate and proof security implementations within infrastructure, application deployment manifests, and automated CI/CD pipelines.

  • Define critical policies, controls, and capabilities to protect global products and environments.

  • Build and automate declarative threat modeling to proactively identify and mitigate application risks.

  • Oversee the product security strategy for migrating legacy data center workloads to the public cloud (AWS).

  • Serve as a trusted cybersecurity advisor to engineering and product teams, participating actively in planning cycles and technical committees.

What You Bring

  • Microservices Security: Proven experience analyzing and securing applications developed using JavaScript and TypeScript.

  • DevSecOps Core: Hands-on experience integrating security scanning/tooling into CI/CD pipelines (GitLab, Jenkins) and utilizing Infrastructure-as-Code models (Terraform, Helm, or CloudFormation).

  • Scripting Skills: Strong development experience in Python and Shell scripting.

  • Modern Infrastructure: Deep familiarity with Docker and service mesh technologies (such as ISTIO).

  • Security Assessments: Strong background in architecture/security reviews, threat modeling, and application risk mitigation within an Agile framework.

  • Software Integrity: A rock-solid understanding of supply chain security, software integrity, and secure software delivery.

  • Compliance & Privacy: Familiarity with industry regulations and frameworks (PCI-DSS, ISO 27001, NIST) and privacy laws like GDPR.

  • Bonus Points: In-depth experience architecting secure services on Kubernetes/AWS and holding industry certifications (e.g., CISSP, CISM, CCSK, CCSP, CEH).

What's in It for You

  • Career Growth: Limitless opportunities to advance in an international, highly dynamic tech environment.

  • Health & Wellness: Comprehensive medical insurance for you and your partner, plus a dedicated sports package to support a healthy lifestyle.

  • Work-Life Balance: 20 working days of paid annual vacation and 6 paid sick leaves.

  • Continuous Learning: Partial compensation for language courses to help you level up your skills.

  • Celebrations & Perks: Special gifts for life milestones (birthdays, weddings, newborns) alongside fully stocked office snacks and refreshments.

  • Premium Workspace: A modern, comfortable office with top-tier facilities in a prime location.

  • Vibrant Culture: Exciting corporate events, team-building activities, and unforgettable international company parties.

Show
Gemini
2 weeks ago

Senior Application Security Engineer

Open 34d RemoteNorth AmericaSenior

Senior Application Security Engineer at Gemini designs and builds secure crypto and Web3 products, leading threat modeling, code reviews, and security tooling while collaborating with engineering teams to embed security best practices.

agentic-aiaiautomationci-cdcloud +14 skills
140 000 – 200 000 $
semperis
6 days ago

Senior Cloud Security Engineer

RemoteMENAFull-timeSenior

Senior Cloud Security Engineer designs and implements secure cloud platforms on Azure and AWS, focusing on Kubernetes security, network controls, and automation to enforce preventive security guardrails.

aksautomationawsazurebash +22 skills
GS Services
2 days ago

Senior Security Engineer

RemoteEuropeSenior

Senior Security Engineer designs, implements, and operates enterprise security controls across Windows/Linux, cloud, and hybrid environments, focusing on IAM, endpoint protection, Zero Trust, automation, and incident response.

active-directoryaiapiawsazure +21 skills
210 – 210 PLN / hr
Temporal Technologies
yesterday

Senior Application Security Engineer

Open 39d RemoteNorth AmericaPart-timeSenior

Senior Application Security Engineer at Temporal Technologies secures the development pipeline, product, and cloud environments by integrating security into architecture, conducting threat modeling, and managing supply chain risks.

aiauthenticationautomationcybersecuritydast +9 skills
180 000 – 225 000 $
Form3
4 days ago

Senior Cloud Security Engineer - AI Resilience & Security Enhancements (Contract

RemoteEuropeContractSenior
+8

Senior Cloud Security Engineer designs and implements security controls for a cloud-native payments platform, focusing on AWS, Kubernetes, and CI/CD security while ensuring regulatory compliance and operational resilience.

aiautomationawsci-cdcloud +11 skills
Canary Technologies
2 weeks ago

Senior Application Security Engineer

RemoteLATAMFull-timeSenior

Senior AppSec engineer to embed security into the software development lifecycle, integrating SAST/DAST/SCA tools into CI/CD pipelines, partnering with developers on secure design, and building developer enablement programs. Works with AWS/Kubernetes environments and automation tools (Python/Go/JavaScript) to keep a hotel tech SaaS platform secure and compliant with SOC 2 and ISO 27001.

aiapiapi-securityauthenticationautomation +28 skills