Staff Application Security Engineer

About the role

We are looking for a senior individual contributor to establish and scale a dedicated application security function within a high‑growth technology environment in Switzerland. You will combine deep security expertise with hands‑on software engineering to embed security into product development, protect customers from fraud and abuse, and drive technical autonomy across the organization.

Key responsibilities

• Design and implement a secure software development lifecycle, integrating threat modeling, secure code reviews, and pre‑release testing into existing engineering workflows.
• Own and improve application security tooling (SAST, DAST, SCA, secrets detection, container and IaC scanning) and integrate them into CI/CD pipelines with clear remediation SLAs.
• Lead threat modeling, architecture security reviews, and hands‑on testing for APIs, SDKs, and cloud‑based systems, focusing on fraud detection, bot mitigation, and abuse scenarios.

Required profile

• At least 8 years of software or security engineering experience, with 5+ years focused on application security.
• Proven ability to drive complex security initiatives independently and influence engineering teams through technical credibility.
• Excellent written and verbal communication skills for translating technical risks to engineers, leadership, and customers.

Required skills

• Strong programming in TypeScript, JavaScript, Go, Python or comparable languages.
• Deep practical knowledge of OWASP Top 10, authentication/authorization design, API security, injection attacks, SSRF, cryptographic misuse, and business‑logic flaws.
• Experience deploying and tuning SAST, DAST, SCA, secrets detection, and CI/CD security integrations.
• Hands‑on use of AI‑assisted security tools for code analysis, vulnerability triage, and automated remediation.