Security Engineer at Air Apps
Italy
Posted
on-site · full_time · Visa sponsorship
Apply for this role at Air Apps
Responsibilities:
- Perform threat modeling and security risk assessments for applications and infrastructure.
- Run vulnerability scans and coordinate penetration tests; triage and track remediation.
- Embed security into the SDLC: code reviews, secure coding guidance and automated security tests in CI/CD.
- Design and enforce IAM, encryption and authentication controls.
- Monitor security telemetry (SIEM/IDS), investigate alerts and lead incident response and RCA.
- Ensure compliance with standards (GDPR, ISO 27001, SOC 2) and maintain security documentation and playbooks.
- Collaborate with product, dev and DevOps teams to secure APIs, third-party integrations and deployments.
Requirements:
- ~4+ years in cybersecurity, application security or security engineering.
- Strong knowledge of OWASP Top 10, threat modeling techniques and secure coding practices.
- Experience with vulnerability tools (Nessus, Qualys, Burp Suite) and penetration testing methodologies.
- Hands-on with SIEM/IDS tooling and security monitoring workflows.
- Scripting/automation skills (Python, Bash, PowerShell) for tooling and response playbooks.
- Familiarity with cloud security controls (AWS/Azure/GCP) and IAM best practices.
- Incident response experience; security certifications (OSCP, CISSP, SANS) are a plus.