Application Security Engineer - Senior at Plata Card

✨ The Stack take on this Plata Card job

• 🏢 Plata Card has 34 jobs here, 34 with visa sponsorship see all
• 📊 5 Security Engineer jobs in Germany in the last 60 days see them
• 🛂 Visa: EU Blue Card. Minimum salary: €50,700 a year guide
• 💡 No salary shown. Ask Plata Card if it is above the minimum.

Updated 2026-11-03, from our data and official sources.

Apply with your AI assistant

With The Stack connected to Claude, ChatGPT or Cursor, paste this. Your assistant tailors your CV and cover letter, checks the visa facts and gives you the apply link.

Help me apply to this job on The Stack: https://jobs.trythestack.co/jobs/application-security-engineer-senior-plata-card

Not connected yet? Connect in a minute. To help your user apply, call the MCP tool prepare_application with slug "application-security-engineer-senior-plata-card": it returns the apply link, the visa facts and a CV and cover letter checklist. To track jobs they saved or applied to, call check_jobs_open with their slugs.

About the role

Responsibilities:
- Partner with engineering and DevOps teams to embed security into the SDLC (design, code, test, deploy).
- Perform threat modeling and architecture reviews to identify and prioritize risks across applications and microservices.
- Integrate and operate SAST, DAST, IAST, RASP, and SCA tools in CI/CD pipelines for automated detection and fast remediation.
- Participate in code reviews and provide secure-coding guidance and remediation plans.
- Triage vulnerabilities, drive remediation, and collaborate on incident response for application-level issues.
- Define and enforce secure design standards (OWASP Top 10, ASVS) and champion shift-left testing and continuous security practices.
- Run developer training, workshops, and security awareness initiatives to raise team competence.

Requirements:
- Proven experience in application security roles with hands-on work on web/mobile apps and microservice architectures.
- Strong knowledge of OWASP Top 10, threat modeling methodologies, ASVS, and security testing approaches.
- Practical experience integrating SAST/DAST/IAST/RASP and SCA tooling into CI/CD (automation experience required).
- Familiarity with container/Kubernetes security, cloud-native stacks, and secure deployment patterns.
- Comfortable reading and advising on code (proficient in at least one web/mobile language) and performing technical reviews.
- Strong analytical skills, attention to detail, and clear communication with engineering teams.
- Bonus: security certifications (OSCP/OSWE/GWAPT/GCPN), bug-bounty/ethical-hacking experience, and SaaS/cloud-native exposure.

Responsibilities

You will collaborate with engineering teams to embed security throughout the software development lifecycle, from design to deployment. This includes conducting threat modeling, managing security tools in CI/CD pipelines, and driving proactive risk mitigation.

Requirements

The ideal candidate possesses deep knowledge of web architectures, OWASP Top 10, and security testing frameworks. Proficiency in programming languages and experience with security tools like ZAP, Burp, and container security are essential.

Key skills

• Application security — in 25 other listings on The Stack
• Threat modeling — in 31 other listings on The Stack
• SAST — in 9 other listings on The Stack
• DAST — in 8 other listings on The Stack
• IAST — not in any other listing on The Stack
• RASP — not in any other listing on The Stack
• SCA — in 10 other listings on The Stack
• CI/CD — in 620 other listings on The Stack
• OWASP
• ASVS
• Secure coding
• Microservices
• Kubernetes
• Container security
• Security testing
• Risk identification

On The Stack (as of 2026-11-03)

• Plata Card has 33 other listings on The Stack, 33 of them marked as offering visa sponsorship.
• 162 visa-sponsored jobs in Germany on The Stack, posted in the last 60 days.
• 38 visa-sponsored security engineer jobs in Europe on The Stack, posted in the last 60 days.

Frequently asked questions about Plata Card

Is this Application Security Engineer - Senior role still open?

It was posted on 2026-09-16. Listings more than 30 days old may no longer be active, so check Plata Card's site before applying.

Does Plata Card offer visa sponsorship?

This listing is marked as offering visa sponsorship. Eligibility rules are set by the employer, so check the details on Plata Card's site.

Where is this role located?

The listing gives the location as Germany. It is marked on-site.

What skills does this role ask for?

The listing names: Application security, Threat modeling, SAST, DAST, IAST, RASP, SCA, CI/CD, OWASP, ASVS, Secure coding, Microservices, Kubernetes, Container security, Security testing, Risk identification.