Vacancy details
This is a private vacancy. Company details stay confidential until InVault confirms a serious candidate fit.
- Status
- Active
- Date posted
- 2026-11-15
- Open until
- 2027-02-13
- Employment type
- Full-time
- Source-listed languages
- Not specified
- Language requirement
- No mandatory language inferred
- Work arrangement
- Remote
- Physical workplaces
- Not specified
- Applicant eligibility
- Poland
Overview
Work remotely from Poland to embed security into payment platform software development. Partner with engineers designing secure microservices, reviewing threats, applying security testing in delivery pipelines and resolving risks in production financial systems.
Requirements
- At least two years of experience in application security or product security.
- Hands-on OWASP Top 10 knowledge and experience reviewing application code for vulnerabilities.
- Practical threat modeling and secure application design experience.
- Ability to integrate SAST, DAST and dependency or secret scanning into CI/CD.
- Strong understanding of web and API security and practical communication with software teams.
- Experience with container security, cloud security, DevSecOps automation or previous software development is beneficial, not mandatory.
Responsibilities
- Develop secure coding standards and work with engineering teams on adoption.
- Conduct threat modeling during service architecture and feature design.
- Deploy and tune SAST, DAST, dependency and secret scanning in development pipelines.
- Assess software security maturity using recognized application security frameworks.
- Triage vulnerabilities and guide remediation through verification.
- Support security assessments, external penetration tests and bug-bounty processes.
- Improve cloud and delivery pipeline security practices.
Conditions
- Full-time remote role for candidates based in Poland.
Tech stack
- OWASP
- SAST
- DAST
- CI/CD