Logo for Jobandtalent

HQ - Senior Application Security Engineer (Remote)

Role overview

Qualifications

  • 3-4 years of experience in Information Security, including at least 2 years in Application Security.
  • Strong experience with Secure SDLC, threat modelling, application security reviews and secure code reviews.
  • Hands-on experience with SAST, SCA and automated security testing integrated into CI/CD pipelines.
  • Strong knowledge of OWASP Top 10, OWASP ASVS, API Security and secure coding best practices.

Responsibilities

  • Act as the Application Security Subject Matter Expert (SME), partnering with Engineering and Product teams to embed security throughout the SDLC.
  • Lead application security reviews, threat modelling, code reviews and penetration testing to identify and mitigate security risks.
  • Design, implement and automate security controls across CI/CD pipelines, including SAST, SCA and other AppSec tooling.
  • Drive the technical roadmap of the Application Security program, improving secure development practices and scaling security initiatives across the organisation.

About the company

Jobandtalent logo

Jobandtalent

Human Resources Services

Jobandtalent is the world-leading temporary job platform that connects great people with a steady stream of work. We are reshaping temporary work and creating the conditions for people to truly thrive. We harness the power of technology and data to provide our people back-to-back opportunities, in order to provide the stability and perks associated with long-term employment. Jobandtalent was founded in 2009 in Madrid with the goal of fundamentally tearing down the barriers of job searching and hiring, and is one of the most successful and fastest growing companies in the industry today. Having placed simplicity and fairness at the core of our platform, we have matched 2,000 international clients with over 200,000 people in 2021. Jobandtalent is currently valued at $2.4 billion and is backed by leading investors including SoftBank, Kinnevik, Atomico and BlackRock. For more information, visit jobandtalent.com. Headquartered in Madrid, but home to the world, the remote-first company is operating in 9+ markets across Europe and the Americas and has ambitious plans for further expansion.

Company details

Company typeLarge
IndustryHuman Resources Services
Company size1001 - 5000

Your match analysis

See how your profile stacks up against this role.

We compared the job requirements to your profile to show where you're strong and where you fall short.

Job description

We are looking for a proactive and experienced Senior Application Security Engineer to help build secure products at scale. As a trusted partner to Engineering and Product teams, you will drive security by design across the Software Development Lifecycle (SDLC), leading initiatives such as threat modelling, secure code reviews, security automation, and developer enablement.

You will play a key role in shaping our Application Security strategy, helping us build secure, resilient products while enabling engineering teams to move fast with confidence.

This is a fully remote position with flexibility within ±1 hour of CET.


Responsibilities
  • Act as the Application Security Subject Matter Expert (SME), partnering with Engineering and Product teams to embed security throughout the SDLC.

  • Lead application security reviews, threat modelling, code reviews and penetration testing to identify and mitigate security risks.

  • Design, implement and automate security controls across CI/CD pipelines, including SAST, SCA and other AppSec tooling.

  • Drive the technical roadmap of the Application Security program, improving secure development practices and scaling security initiatives across the organisation.

  • Improve and manage application security controls, including WAF, Kubernetes security and vulnerability management.

  • Mentor Security Champions and junior engineers, promoting a strong security culture across development teams.

  • Define and communicate meaningful Application Security metrics to measure risk reduction and program effectiveness.


  • A successful candidate will have
  •  3-4 years of experience in Information Security, including at least 2 years in Application Security.

  • Strong experience with Secure SDLC, threat modelling, application security reviews and secure code reviews.

  • Hands-on experience with SAST, SCA and automated security testing integrated into CI/CD pipelines.

  • Strong knowledge of OWASP Top 10, OWASP ASVS, API Security and secure coding best practices.

  • Experience implementing and managing WAF solutions, as well as conducting internal penetration testing (including APIs using Burp Suite).

  • Solid understanding of Kubernetes security, cloud-native applications and networking fundamentals (HTTP, HTTPS, TCP/IP).

  • Basic scripting or development experience, preferably in Python.

  • Excellent communication skills, with the ability to influence engineering teams and explain complex security concepts to technical and non-technical stakeholders.

  • About us
     
    Job&Talent is a world-leading, AI-powered workforce management platform for frontline industries. We help companies boost productivity and efficiency at scale, while giving workers the tools they need to thrive. Our mission is simple: to empower the people who make the world go round.
     
    Built on deep industry expertise, cutting-edge technology, and smart AI agents, our end-to-end platform covers the entire workforce lifecycle — from recruitment and planning to time and attendance, performance, cost management, and communication.
     
    It delivers measurable improvements in the areas that matter most: fulfilment, attendance, retention, and workforce quality. Our platform strength is rooted in unique experience: placing millions of workers over the years and serving thousands of blue-chip clients across delivery, logistics, manufacturing, e-commerce, retail, and hospitality. 
     
    Headquartered in Madrid, the company operates in 10 countries across Europe, the US, and Latin America and is backed by leading investors including Atomico, Goldman Sachs, Kinnevik, BlackRock, and SoftBank.
     
    Join our community and make an impact 
     
    Innovation, high standards, and analytical thinking are in our DNA. Everyone has a voice here, and that voice matters. It’s how we stay sharp, move fast, and make decisions that keep us ahead of the curve.
     
    You’ll take full ownership of your work, collaborate across borders, and grow by doing. Around here, you’ll hear a lot about 10x experiences, human-centered design, and the power of AI. But what truly sets us apart is our people: Our diverse team brings unique perspectives, deep commitment and real-world experience to the table. 
     
    We champion empathy, honesty, and inclusion. Because when people can be their authentic selves, incredible things happen—for our workers, our clients, and for each other. 
     
    And we reward that impact—with competitive pay, meaningful benefits, and the opportunity to shape what work looks like for millions around the globe.
     
     If you're ready to make a real impact at scale, you're in the right place.
     
    Proud to champion equality
     
    At Job&Talent we value diversity and we're an Equal Opportunity Employer. We welcome applications from all suitably qualified people regardless of national origin, race, disability, religious beliefs or sexual orientation. Come join us. We look forward to your application.
    #LI-ML2
     

    Apply once. Then go straight to the hiring manager.

    After you apply, unlock the direct contact details of the people who actually make the call. A quick follow-up makes you 5x more likely to land an interview.

    MR

    Marcus Rivera

    Chief Revenue Officer

    m.rivera@company.com
    linkedin.com/in/marcusrivera
    Unlocked after you apply
    ·

    Security Engineer Related jobs

    Other jobs at Jobandtalent

    Premium

    Reach out to the hiring manager directly.

    Gain access to the contact details of the hiring managers who actually decide, and reach out to network with them directly. That, plus more when you upgrade:

    • Full match report with fit score and gaps
    • Career diagnostics on how recruiters read you
    • Curated company matches and warm intros
    • 48h early access to new roles

    Cancel anytime.