Application Security Specialist

Application Security SpecialistAbout the OfferWe are currently looking for an Application Security Specialist to join the AppSec Platform & Security Engineering team of our global client from the industrial sector. For this role, Optiveum is the recruitment and contracting party, which means you will sign the cooperation agreement directly with us.You will help development teams build secure software by identifying, assessing and mitigating security risks across the entire software development lifecycle.Key Details:Rate: up to 80 PLN/h (B2B)Work Model: Hybrid, approx. 1 day per week in the office (75% remote), full-time (40h/week)Location: WrocławResponsibilities:Support development teams in integrating security into the SDLC and applying secure coding practicesPerform and support security assessments using AppSec tools, analyse findings, prioritise risks and guide teams through vulnerability remediationWork with SAST, DAST, SCA and other security testing technologies to identify risks in applicationsContribute to threat modelling, security design reviews and the use of established security patternsSupport integration and improvement of AppSec tools and processes within CI/CD pipelines and development workflowsContribute to security awareness activities, training materials and guidance for development teamsHelp teams implement security requirements, standards and internal policiesIdentify opportunities to improve AppSec processes, tooling and ways of workingCommunicate findings, explain risks and support practical remediation with developers, architects and security colleaguesRequirements:Degree in Computer Science, Information Security, Cybersecurity or a related field, or equivalent practical experience4–5 years of experience in application security, software security, secure software development or a closely related fieldHands-on experience with application security assessments, vulnerability analysis or security testingExperience working with development teams to identify and fix security issuesIntermediate programming or scripting skills in Python, Java or .NET, with experience building digital productsExperience with AppSec tools such as Semgrep, SonarQube, HCL AppScan, ZAP, Black Duck or Sonatype Lifecycle (or comparable)Good understanding of OWASP Top 10, OWASP ASVS and other relevant OWASP standardsFamiliarity with SAST, DAST and SCA and their integration into CI/CD pipelinesExperience with cloud-native application security, containers or KubernetesFamiliarity with DevSecOps practices, version control and CI/CD, preferably Jenkins, Git, Docker or KubernetesUnderstanding of vulnerability management, risk assessment and remediation processesStrong analytical skills, attention to detail and the ability to explain technical findings to different audiencesCollaborative, proactive mindset with a sense of ownershipFluent EnglishNice to have:Experience with threat modelling and security design reviewsFamiliarity with NIST, OWASP DSOMM and OWASP SAMMApplication security or cybersecurity certificationsAwareness of emerging regulations such as the EU Cyber Resilience Act (CRA)