
Application Security Engineer
Job description
About the Position
We value your privacy
We use cookies to enhance your browsing experience, serve personalised ads or content, and analyse our traffic. By clicking "Accept All", you consent to our use of cookies.
Customise consent preferences
We use cookies to help you navigate efficiently and perform certain functions. You will find detailed information about all cookies under each consent category below.
The cookies that are categorised as "Necessary" are stored on your browser as they are essential for enabling the basic functionalities of the site....
Always active
Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.
-
Cookie_lfa
-
Duration1 year
-
DescriptionThis cookie is set by the provider Leadfeeder to identify the IP address of devices visiting the website, in order to retarget multiple users routing from the same IP address.
-
Cookie__cf_bm
-
Duration1 hour
-
DescriptionThis cookie, set by Cloudflare, is used to support Cloudflare Bot Management.
-
Cookie__hssrc
-
Durationsession
-
DescriptionThis cookie is set by Hubspot whenever it changes the session cookie. The __hssrc cookie set to 1 indicates that the user has restarted the browser, and if the cookie does not exist, it is assumed to be a new session.
-
Cookie__hssc
-
Duration1 hour
-
DescriptionHubSpot sets this cookie to keep track of sessions and to determine if HubSpot should increment the session number and timestamps in the __hstc cookie.
-
Cookieli_gc
-
Duration6 months
-
DescriptionLinkedin set this cookie for storing visitor's consent regarding using cookies for non-essential purposes.
-
Cookiecookietest
-
Durationsession
-
DescriptionThe cookietest cookie is typically used to determine whether the user's browser accepts cookies, essential for website functionality and user experience.
-
Cookiecookieyes-*
-
Duration1 year
-
DescriptionCookieYes sets this cookie for consent solution management.
Functional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.
- Cookielidc
- Duration1 day
- DescriptionLinkedIn sets the lidc cookie to facilitate data center selection.
Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.
-
Cookie_ga
-
Duration1 year 1 month 4 days
-
DescriptionGoogle Analytics sets this cookie to calculate visitor, session and campaign data and track site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognise unique visitors.
-
Cookie_ga_*
-
Duration1 year 1 month 4 days
-
DescriptionGoogle Analytics sets this cookie to store and count page views.
-
Cookie__hstc
-
Duration6 months
-
DescriptionHubspot set this main cookie for tracking visitors. It contains the domain, initial timestamp (first visit), last timestamp (last visit), current timestamp (this visit), and session number (increments for each subsequent session).
-
Cookiehubspotutk
-
Duration6 months
-
DescriptionHubSpot sets this cookie to keep track of the visitors to the website. This cookie is passed to HubSpot on form submission and used when deduplicating contacts.
-
Cookie_pk_id.*
-
Duration1 year 1 month
-
DescriptionMatomo set this cookie to store a unique user ID.
-
Cookie_pk_ses.*
-
Duration1 hour
-
DescriptionMatomo set this cookie to store a unique session ID for gathering information on how the users use the website.
Performance cookies are used to understand and analyse the key performance indexes of the website which helps in delivering a better user experience for the visitors.
No cookies to display.
Advertisement cookies are used to provide visitors with customised advertisements based on the pages you visited previously and to analyse the effectiveness of the ad campaigns.
-
Cookiebcookie
-
Duration1 year
-
DescriptionLinkedIn sets this cookie from LinkedIn share buttons and ad tags to recognize browser IDs.
-
Cookie_gcl_au
-
Duration3 months
-
DescriptionGoogle Tag Manager sets this cookie to experiment advertisement efficiency of websites using their services.
-
Cookietest_cookie
-
Duration15 minutes
-
Descriptiondoubleclick.net sets this cookie to determine if the user's browser supports cookies.
Other uncategorised cookies are those that are being analysed and have not been classified into a category as yet.
- Cookie_lfa_test_cookie_stored
- DurationLess than a minute
- DescriptionDescription is currently not available.
Log inGet a demo
Get Demo
Engineers. Not developers.
We have a strong engineering culture. Solidgate engineers don't maintain systems - they design them. Every architectural decision matters. Every line of code moves the business forward.
We embrace DevOps principles with CI/CD, infrastructure as code (Terraform, AWS Fargate), comprehensive monitoring (Grafana, VictoriaMetrics, VictoriaLogs), and site reliability engineering. Our technology stack includes Go, Kotlin, Python, Node.js, React, TypeScript, RDS, Kafka, and AWS cloud infrastructure.
Life on the engineering team
A sneak peek at our tech stack
Check out the full version of the Tech Radar using the button below
Tech radar page
- Hold
- Assess
- Trial
- Adopt
- Adopt
- Trial
- Assess
- Hold
Adopt
-
1.ElasticSearch
-
2.Kafka
-
3.OpenSearch
-
4.PostgreSQL
-
5.RabbitMQ
-
6.Redis
-
7.SQS
-
8.MongoDB
-
9.MySQL
Adopt
- 10.Blue-Green deployment
- 11.Buf (gRPC)
- 12.Buf (gRPC) Registry
- 13.ChatGPT
- 14.CodeRabbit
- 15.Confluence
- 16.Gemini
- 17.Github Copilot
- 18.GitOps
- 19.golangci-lint
- 20.Jira
- 21.TBD
Trial
-
22.bufbuild/protovalidate
-
23.Cursor
-
24.OpenAPI
Adopt
- 25.Apache Airflow
- 26.AWS
- 27.Docker
- 28.GitLab
- 29.GitLab CI/CD
- 30.Grafana
- 31.Loki
- 32.Terraform
- 33.VictoriaMetrics
Assess
- 34.Kubernetes
Adopt
- 35.Fastify
- 36.Go
- 37.Go PGX
- 38.Kotlin
- 39.Python
- 40.React
- 41.Spring
- 42.Task
- 43.TypeScript
Trial
-
44.Astro
-
45.Echo v4
-
46.GORM
-
47.Hugo
-
48.JavaScript
-
49.Ktor
-
50.Make
-
51.PHP
-
52.Redux
-
53.Shell
-
54.Symfony
Minds behind the code
Product Platform
Builds the core platform every product team runs on, setting the architectural baseline so teams focus on outcomes, not complexity. Teams: Platform, Web Platform, Data Engineering, Platform Analytics.
Payment Infra
Builds the payment engine - orchestration, integrations, and global routing - where we win or lose milliseconds, conversion, margin, and scale. Teams: Connectors, APMs, Reconciliation.
Infra Stream
Keeps everything fast, reliable, and shippable through CI/CD, monitoring, security, and automation - the force multiplier for safer velocity.
Orchestration
Builds the payment router with intelligent routing across PSPs and methods for NA, EU, and LatAm, where we win or lose conversion, margin, and merchant trust. Teams: Connectivity, Routing, Core.
Billing
Builds the subscription engine across the full lifecycle - renewals, upgrades, cancellations, and revenue recovery - where we win or lose LTV, churn, and merchant growth. Teams: Tax, Subscriptions.
Risk Systems
Builds the fraud prevention engine with advanced detection, dispute logic, and real-time automated prevention, where we win or lose merchant trust, transaction safety, and financial resilience. Teams: Launch, Dispute Management.
Product Operations
Teams: Product Design, Tech Writers.
Standalone Teams
Treasury, Finance Engineering, Information Security.
Product Platform
Builds the core platform every product team runs on, setting the architectural baseline so teams focus on outcomes, not complexity. Teams: Platform, Web Platform, Data Engineering, Platform Analytics.
Payment Infra
Builds the payment engine - orchestration, integrations, and global routing - where we win or lose milliseconds, conversion, margin, and scale. Teams: Connectors, APMs, Reconciliation.
Infra Stream
Keeps everything fast, reliable, and shippable through CI/CD, monitoring, security, and automation - the force multiplier for safer velocity.
Orchestration
Builds the payment router with intelligent routing across PSPs and methods for NA, EU, and LatAm, where we win or lose conversion, margin, and merchant trust. Teams: Connectivity, Routing, Core.
Billing
Builds the subscription engine across the full lifecycle - renewals, upgrades, cancellations, and revenue recovery - where we win or lose LTV, churn, and merchant growth. Teams: Tax, Subscriptions.
Risk Systems
Builds the fraud prevention engine with advanced detection, dispute logic, and real-time automated prevention, where we win or lose merchant trust, transaction safety, and financial resilience. Teams: Launch, Dispute Management.
Product Operations
Teams: Product Design, Tech Writers.
Standalone Teams
Treasury, Finance Engineering, Information Security.
What to expect
After you apply, we look beyond your résumé. At Solidgate, we hire product engineers, people who think in outcomes, not just code. The process may evolve, but here's what it typically looks like:
- Apply
- Recruiter Screen
- Tech/Architecture Interview
- Test Assessment (Optionally)
- Soft Skills Interview
- Bar-raising with CEO
- Reference Check
- Offer
Application Security Engineer
Locations
- Warsaw, Europe
- Nicosia, Europe
- Lviv, Europe
- Remote
About the Role
We are seeking an Application Security Engineer to join our Engineering & Data team in Warsaw, Europe, Nicosia, Lviv, or remotely.
Responsibilities
- Conduct security assessments and penetration testing
- Develop and implement security policies and procedures
- Collaborate with development teams to integrate security practices
- Monitor and respond to security incidents
Requirements
- Proven experience in application security
- Strong understanding of security frameworks and standards
- Excellent problem-solving and analytical skills
- Experience with security tools and technologies
We Offer
- Competitive salary
- Opportunity to work with cutting-edge technologies
- Collaborative and innovative work environment
Join our talent community!
Join now
© Solidgate. This job description was sourced from the employer's public career page. TheJob is not the employer — we index the posting and route candidates to the source. All content rights and hiring decisions belong to the employer.
Київ, Варшава (Польща), Лімасол (Кіпр)
More at Solidgate
All 33 roles
Compliance Officer (KYB Specialist)
Solidgate · Kyiv

Talent Marketing Manager
Solidgate

Regulatory Compliance Officer
Solidgate · Kyiv +1

Senior Graphic Designer
Solidgate · Warsaw
Similar jobs

Senior Data Software Engineer
GlobalLogic · Sweden

Java Full Stack Engineer
Cognizant Technology Solutions · United States

Java Full Stack Engineer
Cognizant Technology Solutions · United States

Senior Data Software Engineer
GlobalLogic · Sweden