Application Security Engineer (f/m/d) – Iași, Romania (Hybrid)

Purpose of Position Your role is to establish and lead an Application Security program within the Product and Technology department, acting as an evangelist for AppSec and trusted by engineers and managers alike. As a member of the core security team, you will assess application design proposals to identify improvements that enable engineers to build secure products. You will own and redesign the existing training program to better equip engineers with knowledge to develop securely, and create a Security Champions program to scale and embed a DevSecOps mindset across P&T.

What you'll be responsible for - Secure the SDLC: integrate security tooling (SAST, DAST, dependency scanning) into CI/CD pipelines and IDEs; automate and optimize checks so teams can identify and fix issues early. - Threat modelling & secure design: collaborate with product and engineering teams during design to conduct threat modelling sessions and pre-implementation security reviews. - Code & architecture reviews: guide developers on secure coding practices, perform targeted code reviews, and help resolve vulnerabilities with actionable remediation support. - Vulnerability lifecycle management: identify, triage, track and report vulnerabilities across internal and external apps; collaborate with engineers to close gaps; support bug bounty validation; present vulnerability reports to heads of department. - AI/ML & LLM security: provide guidance on secure development of AI-powered features; manage risks such as prompt injection, model misuse

Application Security Engineer (f/m/d) – Iași, Romania (Hybrid)

Purpose of Position Your role is to establish and lead an Application Security program within the Product and Technology department, acting as an evangelist for AppSec and trusted by engineers and managers alike. As a member of the core security team, you will assess application design proposals to identify improvements that enable engineers to build secure products. You will own and redesign the existing training program to better equip engineers with knowledge to develop securely, and create a Security Champions program to scale and embed a DevSecOps mindset across P&T.

What you'll be responsible for - Secure the SDLC: integrate security tooling (SAST, DAST, dependency scanning) into CI/CD pipelines and IDEs; automate and optimize checks so teams can identify and fix issues early. - Threat modelling & secure design: collaborate with product and engineering teams during design to conduct threat modelling sessions and pre-implementation security reviews. - Code & architecture reviews: guide developers on secure coding practices, perform targeted code reviews, and help resolve vulnerabilities with actionable remediation support. - Vulnerability lifecycle management: identify, triage, track and report vulnerabilities across internal and external apps; collaborate with engineers to close gaps; support bug bounty validation; present vulnerability reports to heads of department. - AI/ML & LLM security: provide guidance on secure development of AI-powered features; manage risks such as prompt injection, model misuse