Senior Security Engineer

We are looking for a Senior Security Engineer with the drive to understand and fix critical application software vulnerabilities, mainly in legacy applications, while introducing agentic tooling (GHCP) for future vulnerability remediation as a key member of the Security Vulnerability Remediation engagement with our client. Responsibilities Investigate and fix critical vulnerabilities flagged by Snyk/Wiz (or equivalent) across mainly legacy applications, including mixed/low-code tech stacks Implement code-level and dependency-level remediations (e.g., version/dependency bumps, secure coding pattern fixes) without introducing regressions Validate fixes against re-scan results within the agreed feedback-loop window, iterating until findings are genuinely closed Pair with AI/agentic tooling (GitHub Copilot) to accelerate triage, patch drafting, and remediation throughput Deploy fixes to dev/non-prod environments and hand off cleanly to QA and client application teams for test/release Feed recurring root-cause patterns back to the Lead Security Engineer/Architect to inform structural fixes Requirements 3+ years of hands-on experience in application security and secure coding, ideally with real vulnerability remediation at volume Proficiency in common stacks such as Java and Python, with the capability to work in legacy/mixed-technology codebases Familiarity with SAST/SCA tooling (Snyk, Wiz, or equivalent) and skills in interpreting and prioritizing findings Competency in distinguishing true positives from false positives and judging remediation risk and feasibility Self-driven mindset, comfortable working independently against a backlog under time pressure English proficiency at a B2+ level Nice to have Hands-on experience with GitHub Copilot or similar AI-assisted coding tools Familiarity with Talend or similar low-code/ETL platforms and their generated-code behavior Background in insurance, financial services, or another regulated industry Security certifications (e.g., OSCP, GWAPT, or similar)