Back to SearchSenior Security Engineer
Remote in Romania
Security.Engineering& 2 others
Looking for something else?
Find a vacancy that works for you. Send us your CV to receive a personalized offer.
Find me a job
We are looking for a Senior Security Engineer with the drive to understand and fix critical application software vulnerabilities, mainly in legacy applications, while introducing agentic tooling (GHCP) for future vulnerability remediation as a key member of the Security Vulnerability Remediation engagement with our client.
Responsibilities
- Investigate and fix critical vulnerabilities flagged by Snyk/Wiz (or equivalent) across mainly legacy applications, including mixed/low-code tech stacks
- Implement code-level and dependency-level remediations (e.g., version/dependency bumps, secure coding pattern fixes) without introducing regressions
- Validate fixes against re-scan results within the agreed feedback-loop window, iterating until findings are genuinely closed
- Pair with AI/agentic tooling (GitHub Copilot) to accelerate triage, patch drafting, and remediation throughput
- Deploy fixes to dev/non-prod environments and hand off cleanly to QA and client application teams for test/release
- Feed recurring root-cause patterns back to the Lead Security Engineer/Architect to inform structural fixes
Requirements
- 3+ years of hands-on experience in application security and secure coding, ideally with real vulnerability remediation at volume
- Proficiency in common stacks such as Java and Python, with the capability to work in legacy/mixed-technology codebases
- Familiarity with SAST/SCA tooling (Snyk, Wiz, or equivalent) and skills in interpreting and prioritizing findings
- Competency in distinguishing true positives from false positives and judging remediation risk and feasibility
- Self-driven mindset, comfortable working independently against a backlog under time pressure
- English proficiency at a B2+ level
Nice to have
- Hands-on experience with GitHub Copilot or similar AI-assisted coding tools
- Familiarity with Talend or similar low-code/ETL platforms and their generated-code behavior
- Background in insurance, financial services, or another regulated industry
- Security certifications (e.g., OSCP, GWAPT, or similar)