Application Security Engineer (Fully Remote

What We're Looking For:

• Define security requirements and design application architectures following a secure-by-default approach.
• Conduct threat modeling, code reviews, and penetration testing on cloud-based web and mobile apps to proactively identify vulnerabilities.
• Implement, manage, and automate SAST/DAST/SCA security controls and WAF rules to enforce protection at scale.

• Strong knowledge of web/mobile security vulnerabilities, AI security risks, and industry standards (e.g., OWASP Top 10, CWE).
• Hands‑on experience with threat modeling frameworks (e.g., STRIDE), code reviews, penetration testing, and SAST/DAST/SCA tools.
• Proficiency in scripting/programming (e.g., Python, Rust) and experience with CI/CD systems and Infrastructure as Code (e.g., Pulumi).

• Full flexibility – work from home, the office, or a mix of both, plus work from anywhere for up to 30 days a year.
• Access to learning resources, mentorship, and a growth plan tailored to you.
• Private healthcare, gym discounts, wellbeing programs, and mental health support.

Prima is a motor insurance company that uses data and technology to provide a great experience for drivers. They are trusted by over 5 million drivers and have over 350 engineers in their Engineering department, fostering a culture of curiosity and collaboration.