Senior Application Security Engineer

About the role

This hands‑on technical position will embed security across Sygnum’s digital‑asset platform, covering web, mobile, APIs, backend services and cloud infrastructure. You will work closely with engineering, platform and product teams to design secure‑by‑design architectures and improve DevSecOps practices.

Key responsibilities

• Integrate and improve security controls within CI/CD pipelines, including SAST, DAST, SCA and IaC scanning.
• Configure, operate and optimise application security tooling, ensuring findings are actionable.
• Partner with engineering and product teams to design secure architectures, perform threat modelling and promote secure development.
• Evaluate open‑source dependencies and support software supply‑chain security initiatives.
• Assess and secure AI‑enabled applications, AI/LLM integrations and model deployment patterns.
• Review and harden Infrastructure‑as‑Code implementations and cloud deployment guardrails.
• Assess security of smart contracts, blockchain integrations and third‑party Web3 services.
• Collaborate with SOC and engineering to improve detection, alerting and response for application‑layer threats.

Required profile

• 5‑7+ years of deep, hands‑on experience in application security or DevSecOps.
• Strong experience securing cloud‑native architectures, preferably AWS and Azure.
• Deep knowledge of Kubernetes security, containers and IaC security.
• Proven ability to perform secure code reviews for backend, web and mobile applications.
• Familiarity with OWASP Top 10, API Top 10 and real‑world security standards.
• Experience with runtime application security, observability and production monitoring.
• Solid understanding of API security, authentication, authorisation and modern identity patterns.
• Hands‑on experience building AI agents to automate security workflows.
• Good grasp of cryptography fundamentals and key management (KMS/HSM).

Required skills

• AWS
• Azure
• Kubernetes
• Containers
• CI/CD pipelines
• SAST
• DAST
• SCA
• IaC scanning
• OWASP Top 10
• API security
• Runtime application security
• Observability
• Detection engineering
• AI/LLM security
• Cryptography
• KMS/HSM

What we offer

• Competitive market salary combined with an entrepreneurial incentive scheme.
• Flexible work‑from‑home policy.
• Professional development through mentoring and buddy programs.
• One‑month fully paid sabbatical after five years of continuous employment.