Application Security Engineer

About the role

We are seeking an Application Security Engineer to join a high‑impact security engineering team in Switzerland. You will work at the intersection of software development and cybersecurity, protecting large‑scale cloud‑native applications that power next‑generation AI infrastructure.

Key responsibilities

• Identify, analyze, and remediate application security vulnerabilities using modern ASPM tools.
• Build, maintain, and enhance ASPM tooling, rules, and automation.
• Integrate security best practices throughout the SDLC in collaboration with development and platform teams.
• Conduct manual and automated penetration testing on applications and supporting infrastructure.
• Lead threat‑modeling sessions and risk assessments for new and existing applications.
• Develop, maintain, and promote secure coding standards and guidelines.
• Act as a subject‑matter expert, providing guidance to internal teams.
• Stay current with emerging threats, vulnerabilities, and mitigation strategies.

Required profile

• Minimum 4 years of experience in application security or related cybersecurity engineering roles.
• Strong understanding of application security risks, including OWASP Top 10.
• Hands‑on experience with secure coding practices in Python, Go, Java, or JavaScript.
• Proficiency in at least one programming language with willingness to learn others.
• Practical experience with security testing tools such as Burp Suite, OWASP ZAP, or Semgrep.
• Experience conducting threat‑modeling exercises and security risk assessments.

Required skills

• Application security
• Secure coding
• Python
• Go
• Java
• JavaScript
• Burp Suite
• OWASP ZAP
• Semgrep
• Threat modeling
• Security testing automation