Senior Security Engineer

We are looking for aSenior Security Engineerwith the drive to understand and fix critical application software vulnerabilities, mainly in legacy applications, while introducing agentic tooling (GHCP) for future vulnerability remediation as a key member of the Security Vulnerability Remediation engagement with our client.

Responsibilities

• Investigate and fix critical vulnerabilities flagged by Snyk/Wiz (or equivalent) across mainly legacy applications, including mixed/low-code tech stacks
• Implement code-level and dependency-level remediations (e.g., version/dependency bumps, secure coding pattern fixes) without introducing regressions
• Validate fixes against re-scan results within the agreed feedback-loop window, iterating until findings are genuinely closed
• Pair with AI/agentic tooling (GitHub Copilot) to accelerate triage, patch drafting, and remediation throughput
• Deploy fixes to dev/non-prod environments and hand off cleanly to QA and client application teams for test/release
• Feed recurring root-cause patterns back to the Lead Security Engineer/Architect to inform structural fixes

Requirements

• 3+ years of hands-on experience in application security and secure coding, ideally with real vulnerability remediation at volume
• Proficiency in common stacks such as Java and Python, with the capability to work in legacy/mixed-technology codebases
• Familiarity with SAST/SCA tooling (Snyk, Wiz, or equivalent) and skills in interpreting and prioritizing findings
• Competency in distinguishing true positives from false positives and judging remediation risk and feasibility
• Self-driven mindset, comfortable working independently against a backlog under time pressure
• English proficiency at a B2+ level

Nice to have

• Hands-on experience with GitHub Copilot or similar AI-assisted coding tools
• Familiarity with Talend or similar low-code/ETL platforms and their generated-code behavior
• Background in insurance, financial services, or another regulated industry
• Security certifications (e.g., OSCP, GWAPT, or similar)