Senior Application Security Engineer

About the role

We're looking for a Senior Application Security Engineer to help keep Tangem's products secure.

You'll focus on finding security issues in our web applications, backend services, and APIs before attackers do. You'll work closely with developers, review new features from a security perspective, validate bug bounty reports, and help improve our overall security posture.

This is a hands on role for someone who enjoys both offensive security and working with engineering teams to build secure products.

• Test web applications and APIs for security vulnerabilities using both manual and automated approaches.
• Review new features and services before and after release to identify security risks.
• Manage and tune application security tools such as WAF, API Firewall, Cloudflare, and similar solutions.
• Investigate and validate bug bounty submissions.
• Work with developers and QA engineers to improve security testing practices.
• Deliver practical security training and guidance to engineering teams.

• 3+ years of experience in Application Security, Penetration Testing, Offensive Security, or a similar role.
• Practical experience finding vulnerabilities in web applications and APIs.
• Experience with Cloudflare security products (WAF, API Shield, etc.) or similar technologies.
• Experience using vulnerability scanners, DAST tools, and other security testing solutions.

• Experience participating in bug bounty programs (Hacker One, Bugcrowd, Google VRP, etc.).
• CTF participation or other practical offensive security activities.
• Security certifications such as OSCP, PNPT, eWPT, or similar.
• Experience integrating security testing into CI/CD pipelines.

• Reduction of critical and high risk application security findings.
• Increased security coverage of applications, APIs, and release processes through reviews, testing, and protection controls.
• Timely and effective handling of security incidents, bug bounty reports, and engineering security requests.

• Stability, growth, participation in shaping the future unicorn.
• Remote work from any location.
• Competitive salary in EURO/USDT.
• Unlimited vacation.
• Compensation for the purchase of necessary technical devices for the work.