Senior Application Security Engineer
- Role
- Security
- Experience
- Senior
- Employment
- Full-time
- Company size
- Startup
Open to Worldwide. Set where you work from to check your eligibility.
No BS summary
We're looking for a Senior Application Security Engineer to help keep Tangem's products secure. You'll focus on finding security issues in our web applications, backend services, and APIs before attackers do. You'll work closely with developers, review new features from a security perspective, validate bug bounty reports, and help improve our overall security posture.
Core skills
Required skills
Optional skills
Tangem is a high-tech company in the blockchain sector was founded in 2017, headquartered in Zug, Switzerland, with branches in North America, Eastern Europe, and APAC.
Tangem started with the idea of bringing digital assets to the masses using a unique combination of a smartcard-based hardware wallet and mobile applications. Company owns and promotes the technology of hardware cold-wallet for digital assets with secure and simple UX in 220 countries today. Our customers enjoy setup time within 1 minute with the ultimate security level for digital assets on their wallet. Tangem solutions offer multi-support of a growing number of thousands of tokens by a single wallet. SBI Crypto Investment Ltd., the digital asset venture investment company wholly owned by SBI Holdings Inc., has invested $15 million into Tangem in 2019 for mass adoption of blockchain technology.
About the role
We're looking for a Senior Application Security Engineer to help keep Tangem's products secure.
You'll focus on finding security issues in our web applications, backend services, and APIs before attackers do. You'll work closely with developers, review new features from a security perspective, validate bug bounty reports, and help improve our overall security posture.
This is a hands on role for someone who enjoys both offensive security and working with engineering teams to build secure products.Stack: SAST, DAST, Burp, CloudFlare, OWASP ZAP, Qualys
Responsibilities:
- Test web applications and APIs for security vulnerabilities using both manual and automated approaches;
- Review new features and services before and after release to identify security risks;
- Manage and tune application security tools such as WAF, API Firewall, Cloudflare, and similar solutions;
- Investigate and validate bug bounty submissions;
- Work with developers and QA engineers to improve security testing practices;
- Deliver practical security training and guidance to engineering teams.
Requirements:
- 3+ years of experience in Application Security, Penetration Testing, Offensive Security, or a similar role;
- Practical experience finding vulnerabilities in web applications and APIs;
- Experience with Cloudflare security products (WAF, API Shield, etc.) or similar technologies;
- Experience using vulnerability scanners, DAST tools, and other security testing solutions;
- Experience with at least one programming language such as Python, Go, or JavaScript.
Nice to have:
- Experience participating in bug bounty programs (HackerOne, Bugcrowd, Google VRP, etc.);
- CTF participation or other practical offensive security activities;
- Security certifications such as OSCP, PNPT, eWPT, or similar;
- Experience integrating security testing into CI/CD pipelines.
Success Metrics:
- Reduction of critical and high risk application security findings;
- Increased security coverage of applications, APIs, and release processes through reviews, testing, and protection controls;
- Timely and effective handling of security incidents, bug bounty reports, and engineering security requests.
What We Offer:
- Stability, development, participation in the future unicorn's growth;
- Remote work from anywhere in the world;
- Competitive salary in EUR/USDT;
- Unlimited vacation;
- Birthday presents;
- Compensation for the purchase of necessary technical devices for the work;
- Paid sick leaves.
Feel free to send you CV to Ivan - vkolesnikov@tangem.com
What you'll do
- Test web applications and APIs for security vulnerabilities using both manual and automated approaches
- Review new features and services before and after release to identify security risks
- Manage and tune application security tools such as WAF, API Firewall, Cloudflare, and similar solutions
- Investigate and validate bug bounty submissions
- Work with developers and QA engineers to improve security testing practices
What they require
- 3+ years of experience in Application Security, Penetration Testing, Offensive Security, or a similar role
- Practical experience finding vulnerabilities in web applications and APIs
- Experience with Cloudflare security products (WAF, API Shield, etc.) or similar technologies
- Experience using vulnerability scanners, DAST tools, and other security testing solutions
- Experience with at least one programming language such as Python, Go, or JavaScript
Benefits
- Stability, development, participation in the future unicorn's growth
- Remote work from anywhere in the world
- Competitive salary in EUR/USDT
- Unlimited vacation
- Birthday presents
Tangem is a high-tech company in the blockchain sector was founded in 2017, headquartered in Zug, Switzerland, with branches in North America, Eastern Europe, and APAC.Tangem started with the idea of bringing digital assets to the masses using a unique combination of a smartcard-based hardware wallet and mobile applications. Company owns and promotes the technology of hardware cold-wallet for digital assets with secure and simple UX in 220 countries today. Our customers enjoy setup time within 1 minute with the ultimate security level for digital assets on their wallet. Tangem solutions offer multi-support of a growing number of thousands of tokens by a single wallet. SBI Crypto Investment Ltd., the digital asset venture investment company wholly owned by SBI Holdings Inc., has invested $15 million into Tangem in 2019 for mass adoption of blockchain technology.