Application Security Engineer

Application Security Engineer 🏢 TripleTen 📍 Remote · Armenia 🕐 Full Time About the role Nebius Academy (powered by TripleTen) provides assessments and training for tech companies and aspiring professionals worldwide, helping companies & individuals transform their lives through career development and acquiring the new skills needed as a tech professional. Our focus on data science, machine learning, and generative AI helps tech-forward companies level up their employees' skills and drive innovation. What you’ll do 🗂 • Own application and product security end to end, from design reviews and threat modelling to vulnerability remediation and follow-up. • Partner with product and platform teams to embed security into the development lifecycle rather than treat it as a final review step. • Build and improve security controls in CI/CD, including SAST, dependency, secrets, container, and IaC scanning. • Review application designs and code where security risk is meaningful, and turn recurring findings into secure defaults, shared libraries, lint rules, and CI gates. • Drive vulnerability management across application code and cloud posture, including triage, risk-based prioritisation, remediation timelines, and external pentest findings. • Strengthen security in multitenant B2B systems, including tenant isolation, authentication, authorization, RBAC / ABAC, and access controls. What we’re looking for 🔎 • Strong software engineering background with the ability to read, review, and write production code; Python experience is highly preferred. • Deep practical knowledge of web application security, including OWASP Top 10, ASVS, authentication and session management, OAuth2 / OIDC / SAML, and authorization issues such as IDOR and broken access control. • Hands-on experience embedding security into CI/CD, including SAST, SCA, secrets scanning, container scanning, and IaC scanning. • Working knowledge of AWS and Kubernetes security, including IAM, secrets management, network boundaries, and workload hardening. • Strong communication skills and the ability to explain security risks clearly to engineers, product managers, and auditors. • Fluent Russian and English at B2 level or above. How to apply 🙋 Open on ITA Jobs and apply → More IT vacancies in Armenia, matched to your CV — jobs.ita.am/vacancies #SoftwareEngineering #Mid #Python