Security Engineer

About the role

As a Security Engineer at Air Apps you will safeguard applications, infrastructure, and data from threats. You will collaborate with development, DevOps, and IT teams to embed security throughout the software development lifecycle.

Key responsibilities

• Develop and implement threat modeling to identify security risks across applications and infrastructure.
• Conduct vulnerability scanning, penetration testing, and security assessments to detect weaknesses.
• Define and enforce secure coding practices in collaboration with development teams.
• Integrate security into CI/CD pipelines and automate security testing with DevOps.
• Monitor and respond to security incidents, performing root‑cause analysis and preventative measures.
• Ensure compliance with standards such as ISO 27001, GDPR, and SOC 2.

Required profile

• Approximately 4+ years of experience in cybersecurity, application security, or security engineering.
• Strong knowledge of secure coding principles, OWASP Top 10, and threat modeling techniques.
• Hands‑on experience with vulnerability scanning tools (Nessus, Qualys, Burp Suite) and penetration testing.
• Experience with SIEM, intrusion detection systems, and security monitoring tools.
• Proficiency in scripting and automation (Python, Bash, PowerShell).
• Familiarity with cloud security in AWS, Azure, or GCP, including IAM and workload protection.

Required skills

• Threat modeling
• Vulnerability scanning (Nessus, Qualys, Burp Suite)
• Penetration testing
• Secure coding (OWASP Top 10)
• SIEM and IDS
• Python, Bash, PowerShell scripting
• AWS, Azure, GCP security
• IAM policies
• Encryption protocols
• DevSecOps and CI/CD integration

What we offer

• Apple hardware ecosystem for work
• Annual bonus
• Top‑tier health and life insurance
• Transportation budget
• Coverflex benefits package
• Childcare support
• Air Conference events
• Pension fund
• Urban Sports Club membership
• Free meals at the hub