Security Engineer
Solvd · Remote · Poland · Georgia ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Fully remote
- Application Security
- 5+ years experience
- Threat modeling
- API security
Join Solvd Inc. as an Application Security Engineer on a high-visibility project building a digital news platform for a major international brand. You will serve as the security authority, ensuring robust controls are integrated into every phase of delivery, including the composable CMS, video pipelines, and public-facing APIs designed for extreme traffic.
What you'll do
- Define and validate security controls across all delivery phases
- Perform architecture reviews and threat modeling at design stage
- Review authentication, authorization, and privileged access controls
- Validate API and integration security in multi-vendor architectures
- Audit secrets, credentials, and token management practices
- Coordinate vulnerability scanning and penetration testing remediation
- Ensure secure data handling and encryption in storage and transit
- Support GDPR compliance and privacy engineering requirements
- Conduct third-party security assessments for vendors
- Produce security acceptance evidence and remediation guidance
What you'll need
- 5+ years in application security or security engineering
- Experience with threat modeling and architecture reviews
- Strong knowledge of OAuth, OIDC, RBAC, and PAM
- Hands-on experience validating API security patterns
- Understanding of secrets management and token lifecycles
- Experience coordinating vulnerability scans and pen tests
- Knowledge of encryption standards and secure data handling
- Familiarity with GDPR and privacy-by-design principles
- Ability to produce clear remediation documentation
Nice to have
- Experience with composable CMS like AEM or Amplience
- Background in high-traffic public-facing platforms
- Experience with SIEM, alerting, and incident response
- Familiarity with vendor security assessment processes
- Relevant certifications such as CISSP, OSCP, or CEH
- Experience in phased full-lifecycle delivery programs
Stack
- AEM
- Amplience
- OAuth
- OIDC
- SIEM
How you'll work
- Fully remote position
- Global team collaboration
What you get
- Work on AI-driven enterprise projects
- Inclusive environment prioritizing continuous learning
- Equal opportunities for global collaboration