Back to SearchSenior Application Security Engineer
Remote in Türkiye
Security.Engineering& 4 others
Looking for something else?
Find a vacancy that works for you. Send us your CV to receive a personalized offer.
Find me a job
We are looking for a Senior Application Security Engineer to design, implement, and operate security-tooling integrations across certificate management, secrets management, privileged access, and vulnerability detection platforms. In this role, you will work closely with SOC, IAM, and Network Architecture teams to embed security controls into the platform's infrastructure and CI/CD pipelines, ensuring robust audit, compliance, and governance practices across the organization.
Responsibilities
- Implement and operate the certificate-management integration with Venafi: issuance workflows and distribution across F5, Azure Key Vault, and VM/OS certificate stores, including renewal/rotation automation
- Build and maintain the secrets-management integration (OpenBao, Azure Key Vault): configuration-as-code for authentication methods, namespaces, mounts, policies, and dynamic secrets engines (database, cloud)
- Implement the Privileged Access Management (PAM) "break-the-glass" workflow: time-boxed grant requests, approval-chain automation, session recording hooks, and audit-trail logging
- Build SIEM and WAF alert-integration pipelines (alert feed ingestion, entity correlation, severity views) and the Vulnerability Dashboard, integrating findings from SAST/DAST/SCA/IAST/ASPM scanners
- Implement Policy as Code checks (OPA/Conftest, Azure Policy): baseline policy library, CI gate integration, and exemption/waiver workflow automation
- Support the platform's Auth/RBAC configuration from a security-tooling perspective (Entra ID, Active Directory, GPOs, M365 groups), ensuring audit-retention settings are correctly applied
- Work with the Network Architect to translate firewall/WAF policy requirements (PaloAlto, F5, Cloudflare) into the SIEM/WAF alert integration and Vulnerability Dashboard
- Support SOC and IAM teams during security reviews, preparing evidence and configuration details for security-sensitive integrations
- Troubleshoot and remediate security-tooling issues during Implementation and Adoption
Requirements
- 3+ years of experience implementing security-tool integrations: certificate-lifecycle management (Venafi or equivalent), secrets management (OpenBao, Key Vault), and PAM workflows
- Experience with SIEM/SOAR alert pipelines and vulnerability-management tooling (SAST/DAST/SCA/IAST/ASPM)
- Experience implementing Policy as Code checks (OPA/Conftest, Azure Policy) and CI/CD gate enforcement
- Knowledge of enterprise identity and access management (Entra ID, Active Directory, RBAC/claims-based authorization)
- Familiarity with firewall/WAF concepts (PaloAlto, F5, Cloudflare) sufficient to define alerting/finding-correlation requirements
- Ability to work within governance-heavy, security-sensitive change-control processes
Nice to have
- Experience integrating security tooling with a Backstage-based (or comparable) developer portal
- Familiarity with supply-chain security practices (artifact signing/SBOM, e.g., cosign/Sigstore)
- Knowledge of Conditional Access automation (Entra ID/Microsoft Graph API)
- Experience with Infrastructure as Code (Terraform/OpenTofu) for implementing security modules