Senior Application Security Engineer

About the role

We are seeking a Senior Application Security Engineer to reduce security risk across web applications and APIs throughout the software development lifecycle. You will work remotely from anywhere in Armenia, partnering closely with engineering teams to assess security, perform secure design and code reviews, and drive remediation.

Key responsibilities

• Perform security assessments of web applications, APIs, services and supporting components.
• Facilitate threat modeling and review architectures and technical designs from a security perspective.
• Conduct secure code reviews, identify vulnerabilities and insecure implementation patterns.
• Validate findings from automated tools, reduce false positives and prioritize issues based on exploitability and business impact.
• Provide clear, actionable remediation guidance and track findings through remediation and retesting.
• Advise teams on authentication, authorization, session management, input validation, data protection, cryptography, secrets handling and API security controls.

Required profile

• Hands‑on experience in application or product security.
• Strong knowledge of web application and API security, including OWASP Top 10.
• Practical experience with security assessments, secure design reviews and secure code reviews.
• Ability to read and understand code in at least one language such as Java, C#, JavaScript/TypeScript, Python or Go.
• Strong communication skills and the ability to provide practical guidance to engineering teams.

Required skills

• SAST, DAST, IAST, SCA or secrets‑scanning tools.
• Threat modeling and secure software design principles.
• Authentication, authorization, session management, input validation, cryptography, secrets handling, data protection.
• Cloud security concepts (AWS, Azure, Google Cloud) and IAM/OAuth2/OpenID Connect/SAML.
• Containers, Kubernetes and Infrastructure‑as‑Code security (Terraform).
• Relevant security certifications (e.g., CSSLP, CISSP) or equivalent expertise.

What we offer

• Fully remote work with flexibility to work from any location in Armenia.
• Opportunities to work abroad for up to two months per year.
• Leadership development, career advising, soft‑skills and well‑being programs.
• Access to internal learning resources, certifications (GCP, Azure, AWS) and free English classes.
• Comprehensive medical and family care package, employee stock purchase plan and referral bonuses.