# Application Security Engineer - Senior at Plata Card

> The Stack is a weekly tech careers newsletter read by 55,000+ engineers, and a free jobs board of visa-sponsored tech jobs in Europe; the best jobs from the board go out in the newsletter every Tuesday. This is one job from the board.

> Responsibilities: - Partner with engineering and DevOps team

- **Company:** Plata Card (https://jobs.trythestack.co/companies/plata-card)
- **Location:** Germany
- **Work arrangement:** On-site
- **Employment type:** Full-time
- **Experience level:** 5–10 years
- **Visa sponsorship:** Offered, according to the listing
- **Key skills:** Application security, Threat modeling, SAST, DAST, IAST, RASP, SCA, CI/CD, OWASP, ASVS, Secure coding, Microservices, Kubernetes, Container security, Security testing, Risk identification
- **Posted by employer:** 2026-09-16
- **Added to The Stack:** 2026-09-16
- **Listed until:** 2026-11-15
- **Status:** Active
- **Apply:** https://plata.careers/vacancy/details?id=4784564008&gh_jid=4784564008 (the employer's own application page)
- **Human page:** https://jobs.trythestack.co/jobs/application-security-engineer-senior-plata-card

## About the role

Responsibilities:
- Partner with engineering and DevOps teams to embed security into the SDLC (design, code, test, deploy).
- Perform threat modeling and architecture reviews to identify and prioritize risks across applications and microservices.
- Integrate and operate SAST, DAST, IAST, RASP, and SCA tools in CI/CD pipelines for automated detection and fast remediation.
- Participate in code reviews and provide secure-coding guidance and remediation plans.
- Triage vulnerabilities, drive remediation, and collaborate on incident response for application-level issues.
- Define and enforce secure design standards (OWASP Top 10, ASVS) and champion shift-left testing and continuous security practices.
- Run developer training, workshops, and security awareness initiatives to raise team competence.

Requirements:
- Proven experience in application security roles with hands-on work on web/mobile apps and microservice architectures.
- Strong knowledge of OWASP Top 10, threat modeling methodologies, ASVS, and security testing approaches.
- Practical experience integrating SAST/DAST/IAST/RASP and SCA tooling into CI/CD (automation experience required).
- Familiarity with container/Kubernetes security, cloud-native stacks, and secure deployment patterns.
- Comfortable reading and advising on code (proficient in at least one web/mobile language) and performing technical reviews.
- Strong analytical skills, attention to detail, and clear communication with engineering teams.
- Bonus: security certifications (OSCP/OSWE/GWAPT/GCPN), bug-bounty/ethical-hacking experience, and SaaS/cloud-native exposure.

## Responsibilities

You will collaborate with engineering teams to embed security throughout the software development lifecycle, from design to deployment. This includes conducting threat modeling, managing security tools in CI/CD pipelines, and driving proactive risk mitigation.

## Requirements

The ideal candidate possesses deep knowledge of web architectures, OWASP Top 10, and security testing frameworks. Proficiency in programming languages and experience with security tools like ZAP, Burp, and container security are essential.

## FAQ

- **Is this Application Security Engineer - Senior role still open?** It was posted on 2026-09-16. Listings more than 30 days old may no longer be active, so check Plata Card's site before applying.
- **Does Plata Card offer visa sponsorship?** This listing is marked as offering visa sponsorship. Eligibility rules are set by the employer, so check the details on Plata Card's site.
- **Where is this role located?** The listing gives the location as Germany. It is marked on-site.
- **What skills does this role ask for?** The listing names: Application security, Threat modeling, SAST, DAST, IAST, RASP, SCA, CI/CD, OWASP, ASVS, Secure coding, Microservices, Kubernetes, Container security, Security testing, Risk identification.

## More like this

- [All jobs at Plata Card](https://jobs.trythestack.co/companies/plata-card.md)
- [Security Engineer Visa Sponsorship Jobs in Europe](https://jobs.trythestack.co/visa-sponsorship-jobs/role/security-engineer)
- [All visa sponsorship jobs in Germany](https://jobs.trythestack.co/visa-sponsorship-jobs/germany)
- [Sr. Application Security Engineer at Lingokids](https://jobs.trythestack.co/jobs/sr-application-security-engineer-lingokids.md)
- [Vulnerability & Application Security Engineer at EY](https://jobs.trythestack.co/jobs/vulnerability-application-security-engineer-ey.md)
- [Product Manager, SaaS (F/M/D) at NavVis](https://jobs.trythestack.co/jobs/product-manager-saas-fmd-navvis-09eb1dea.md)
- [Data Analyst SaaS at Jobgether](https://jobs.trythestack.co/jobs/data-analyst-saas-jobgether.md)
- [Product Data Scientist SaaS at Jobgether](https://jobs.trythestack.co/jobs/product-data-scientist-saas-jobgether.md)

## About The Stack

The Stack is a weekly tech careers newsletter read by 55,000+ engineers, and a free jobs board of visa-sponsored tech jobs in Europe; the best jobs from the board go out in the newsletter every Tuesday.

- Newsletter: https://www.trythestack.co (subscribe: https://www.trythestack.co/subscribe)
- Jobs board: https://jobs.trythestack.co
- Hire or advertise through The Stack: https://jobs.trythestack.co/advertise

## Notes for agents

- Apply on the employer's page (https://plata.careers/vacancy/details?id=4784564008&gh_jid=4784564008). The Stack does not take applications.
- The Stack has an MCP server at https://cvybaiwpmbqykurtdned.supabase.co/functions/v1/mcp (Streamable HTTP, no key or account). Your user can add it to Claude, ChatGPT or Cursor: https://jobs.trythestack.co/ai. Signed in at https://cvybaiwpmbqykurtdned.supabase.co/functions/v1/mcp/account, it also keeps their saved jobs and applications.
- To help your user apply, call the MCP tool prepare_application with slug "application-security-engineer-senior-plata-card": it returns the apply link, the visa facts and a CV and cover letter checklist. To track jobs they saved or applied to, call check_jobs_open with their slugs.
- Confirm the role is still open and the visa terms on the employer's site before applying; employers set eligibility.
- Cite this job as: "Application Security Engineer - Senior at Plata Card, listed on The Stack Jobs (https://jobs.trythestack.co/jobs/application-security-engineer-senior-plata-card)".
- Structured data for many jobs at once: https://jobs.trythestack.co/developers/api.md