Application Security Engineer
Primary stack
Job description
About the Position
We are hiring an Application Security Engineer to support the implementation and daily operations of our application security tooling and processes. This role focuses on technical depth-analyzing scan results, fine-tuning tools, and collaborating with engineers to embed secure development practices. You will work alongside the broader security and engineering teams to reduce vulnerabilities early in the development lifecycle.
Responsibilities
- Implement, configure, and manage application security tools focused on SAST, SCA, secrets detection, and IaC scanning.
- Integrate security scanning tools into CI/CD pipelines, ensuring coverage and minimizing friction for developers.
- Regularly review scan results, prioritize findings, and work with developers to remediate vulnerabilities.
- Perform secure code reviews and provide actionable remediation guidance.
- Maintain and continuously improve security rulesets, baselines, and documentation for tools like Semgrep, Mend, GitHub Advanced Security.
- Collaborate with security engineers on enhancements to DAST and container/image scanning workflows.
- Contribute to internal documentation, secure coding standards, and developer enablement efforts.
Requirements
- 3–5 years of experience in Application Security or Software Development with a security focus.
- Hands-on experience with tools like Semgrep, Mend, GitHub Advanced Security, and HCL AppScan.
- Comfortable working in Git-based CI/CD environments (e.g., GitHub Actions, GitLab CI).
- Knowledge of OWASP Top 10, secure coding practices, and common code-level vulnerabilities.
- Familiarity with DAST tools (e.g., Tenable Web App Scanning) and experience supporting Pentest validation efforts.
- Ability to collaborate effectively with developers, security team members, and DevOps.
About the Company
A global leader in gaming, who deliver entertaining and responsible gaming experiences for players across all channels and regulated segments, from Gaming Machines and Lotteries to Sports Betting and Digital. Leveraging a wealth of compelling content, substantial investment in innovation, player insights, operational expertise, and leading-edge technology, company’s solutions deliver unrivaled gaming experiences that engage players and drive growth. The company has a well-established local presence and relationships with governments and regulators in more than 100 countries around the world, creating value by adhering to the highest standards of service, integrity, and responsibility.
© PTT Consulting. This job description was sourced from the employer's public career page. TheJob is not the employer — we index the posting and route candidates to the source. All content rights and hiring decisions belong to the employer.
IT Services,Recruitment & HR Tech
About the Company PTT Consulting is a company based in Warsaw that specializes in the full development lifecycle. The company offers extensive experience in designing and developing Java EE projects. PTT Consulting provides full-service consulting aimed at improving various aspects of IT projects. Products, Services & Tech Stack Core Solutions Full development lifecycle services Full-service consulting Technologies & Frameworks Java EE Business Analyst Java Developer Project Manager Frontend Developer SDET Quality Assurance L2 Support Engineer Data Architect BI Engineer DevOps Performance Engineer Infrastructure PM Agile Coach Cloud Architect Azure Scrum Master Project Scope & Target Clients Client Base International projects in Poland and the US Engineering Scale Projects involving multidisciplinary teams Scope and complexity of engineering projects not explicitly detailed
More at PTT Consulting
All 105 rolesValidation Engineer
PTT Consulting · United States
Business Analyst
PTT Consulting · Brazil +1
C Software Engineer
PTT Consulting
Java Developer
PTT Consulting