Security Engineer

Responsibilities

• Build and implement Secure SDLC practices within the development process
• Integrate SAST, DAST, SCA, and other security tools into CI/CD pipelines
• Identify, analyze, and support the remediation of vulnerabilities in applications and dependencies
• Automate basic anti-phishing mechanisms and security controls
• Advise engineering teams on secure coding and security best practices
• Deliver security training and improve team awareness
• Participate in security monitoring and incident response
• Support the implementation of asset and risk management practices

Requirements

• 2+ years of experience in Product Security, AppSec, or DevSecOps
• Experience with Secure SDLC or DevSecOps practices
• Familiarity with SAST, DAST, SCA, or other security scanning tools
• Experience working with CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins, etc.)
• Hands-on experience using AI-driven security platforms to analyze vulnerabilities
• Good understanding of OWASP MAS and common web and mobile vulnerabilities
• Experience building or improving risk management processes

Preferred Qualifications

• Experience building AppSec or DevSecOps practices from scratch
• Experience with threat modeling or architecture security reviews
• Experience working with cloud platforms (AWS, GCP)
• Experience with Kubernetes and container security
• Participation in security incident response
• Relevant security certifications

About the Company

appflame is a Ukrainian product IT company that creates world-class products including Hily, Taimi, AdConnect, and Mailkeeper. With over 500 employees, they aim to build global unicorn products and foster a thriving tech ecosystem in Ukraine.