Security Engineer at Air Apps
Switzerland
Posted
on-site · full_time · Visa sponsorship
Apply for this role at Air Apps
Responsibilities:
- Develop and run threat models to identify risks across applications and infrastructure.
- Perform vulnerability scans, penetration tests, and security assessments (e.g., Nessus, Qualys, Burp Suite).
- Define and enforce secure coding practices and OWASP-based controls with engineering teams.
- Integrate security checks and automated tests into CI/CD pipelines (DevSecOps).
- Monitor, investigate, and respond to security incidents; lead RCA and remediation actions.
- Design IAM policies, encryption standards, and authentication mechanisms.
- Ensure compliance with relevant standards and regulations (GDPR, ISO 27001, SOC 2).
- Conduct security reviews for APIs, third-party integrations, and new features; produce guidance and documentation.
Requirements:
- ~4+ years in cybersecurity, application security, or security engineering roles.
- Solid understanding of secure coding principles and OWASP Top 10.
- Hands-on experience with vulnerability scanning and penetration testing tools.
- Familiarity with SIEM, IDS/IPS, logging, and security monitoring workflows.
- Scripting/automation skills (Python, Bash, PowerShell) to build security tooling.
- Practical knowledge of cloud security (AWS/Azure/GCP) and IAM best practices.
- Experience with incident response processes and security controls implementation.