Application Security Engineer

About the Position

We are seeking an Application Security Engineer to join our team in Kyiv, Ukraine, focusing on enhancing application security practices and frameworks.

Application Deadline: 13.11.2026

Location: Kyiv, Ukraine (Remote)

---

Responsibilities

• Conducting security audits using the OWASP SAMM framework to evaluate current practices, identify gaps, and assess compliance levels within the organization.
• Developing and implementing plans to improve application security maturity across the organization, with a focus on continuous improvement.
• Managing security architecture with an emphasis on integrating security at every stage of the software development lifecycle.
• Participating in threat modeling.
• Overseeing security testing at various stages of software development, with a focus on creating and managing the DAST process.
• Managing application security and metrics.
• Ensuring compliance with relevant industry standards and regulations by regularly updating security policies and standards.
• Configuring and automating defect tracking, SLA, and management models to manage vulnerabilities in product teams.
• Developing and conducting training and awareness programs to improve security knowledge and practices within the organization.
• Collaborating with various team members, including developers and top management, to promote and implement best practices in application security.
• Utilizing cloud services to ensure application security.

---

Requirements

• 1+ years of experience in application security (Application Security), including security assessment, vulnerability remediation, and the implementation of security measures within the software development lifecycle.
• Knowledge and understanding of the secure software development lifecycle (S-SDLC).
• Knowledge of network protocols.
• Basic knowledge of penetration testing methodologies and DAST tools.
• Understanding of frameworks such as OWASP SAMM, BSIMM, or Microsoft SDL.
• Understanding of information security and application security principles.
• Understanding of software architecture and secure design principles.
• Skills in using security scanners such as SAST, DAST, SCA, Secret Detection, and Container scanning, as well as experience integrating security scanners into pipelines (Jenkins, GitLab).
• Ability to independently seek information and solve complex problems.

---

We Offer

• Work in the largest and most innovative bank in Ukraine.
• Official employment and 24+4 calendar days of vacation.
• Competitive salary.
• Health insurance and corporate mobile communication.
• Corporate training.
• Modern, comfortable office.
• Interesting projects, ambitious tasks, and dynamic development.
• Friendly, professional team and strong team.
• Opportunity for remote work.

---

About the Company

ПриватБанк is committed to supporting and employing veterans and individuals with disabilities. Discrimination based on health status and physical abilities, age, race or ethnicity, gender, and marital status is unacceptable to us. We are ready to train veterans and candidates with disabilities without prior experience in the banking sector.

If you have a disability or are a veteran, please contact [email protected]. PrivatBank specialists will provide consultation and support throughout the selection process and after employment.