Back to jobs

Application Security Engineer

Anywhere

About Remote

Remote is solving global remote organizations’ biggest challenge: employing anyone anywhere compliantly. We make it possible for businesses big and small to employ a global team by handling global payroll, benefits, taxes, and compliance. Check out remote.com/how-it-works to learn more or if you’re interested in adding to the mission, scroll down to apply now.

Not only do we encourage folks from all ethnic groups, genders, sexuality, age, abilities, disability status and any other under-represented group to apply, but we prioritize a sense of belonging. We have 4 ERGs (Women, Disability, Queer, Minorities in Tech) who meet regularly with the People team. During your interviews and beyond, we ask & encourage anybody who needs an accommodation to request one from their recruiter.

At Remote, we embrace AI as a valuable tool while prioritizing human creativity and authenticity. We look forward to meeting candidates who balance innovation with genuine expertise and experience. To learn more about Remote's AI guidelines check see here. 

All of our positions are fully remote. You do not have to relocate to join us!

The position

This is an exciting time to join Remote and make a personal difference in the global employment space as an Application Security Engineer, joining our Security team.

Key responsibilities

- Perform vulnerability scans and discuss results with teams.
- Perform code review (ad-hoc) to identify vulnerabilities.
- Assists in vulnerability management process, including assign/modify CVSS score and severity level
- Support identification of potential security risks from a threat model.
- Participate in product features design to identify potential security risks.
- Investigate and determines the exploitability of a vulnerability, either theorically or with a PoC
- Supports management of CI/CD security tools.

 Requirements

- From 2 to 4 years of experience.
- Bachelor's degree in Computer Science, Cybersecurity, or related field (or equivalent experience).
- Good understanding of most common security vulnerabilities (e.g. OWASP Top 10 web, api, mobile and IaC) and general mitigation strategies
- Knowledge of secure coding practices and Secure SDLC
- Experience with security testing tools (SAST, SCA, DAST, etc)
- Basic knowledge of threat modelling
- Experience with Vulnerability Management
- Knowledge of automation of security tools (scripting, playbooks, etc)
- Writes and speaks fluent English.
- Excellent communication and interpersonal skills
- Good analytical and problem-solving skills
- Team oriented

Nice to have

- Experience with offensive testing toolkits (e.g. burp suite, owasp zap)
- Knowledge of tuning appsec testing tools
- Security Certifications
- Experience working remotely
- Experience running a bug bounty program
- Experience working with SIEM solution

 

 Practicals

- You'll report to: Application Security Manager
- Team: Security
- Location: Anywhere in the World
- Start date: As soon as possible

Remote Compensation Philosophy

Remote's Total Rewards philosophy is to ensure fair, unbiased compensation and fair equity pay along with competitive benefits in all locations in which we operate. We do not agree to or encourage cheap-labor practices and therefore we ensure to pay above in-location rates. We hope to inspire other companies to support global talent-hiring and bring local wealth to developing countries.

At first glance our salary bands seem quite wide - here is some context. At Remote we have international operations and a globally distributed workforce.  We use geo ranges to consider geographic pay differentials as part of our global compensation strategy to remain competitive in various markets while we hiring globally.

The base salary range for this full-time position is 35,250 USD to 79,300 USD. Our salary ranges are determined by role, level and location, and our job titles may span more than one career level. The actual base pay for the successful candidate in this role is dependent upon many factors such as location, transferable or job-related skills, work experience, relevant training, business needs, and market demands. The base salary range may be subject to change.

At Remote, we foster internal mobility as a key element of our culture of employee growth and development, supported by a compensation philosophy that guarantees pay equity and fairness. Therefore, all compensation changes associated with an internal move will be reviewed by the Total Rewards & People Enablement team on a case by case basis.

Application process

  1. Interview with recruiter
  2. Interview with future manager
  3. Take home challenge
  4. Interview with team members (no managers present)
  5. Executive interview
  6. Bar Raiser Interview
  7. Prior employment verification check 
  8. offer

#LI-DNP

Benefits

Our full benefits & perks are explained in our handbook at remote.com/r/benefits. As a global company, each country works differently, but some benefits/perks are for all Remoters:
  • work from anywhere
  • flexible paid time off
  • flexible working hours (we are async)
  • 16 weeks paid parental leave
  • mental health support services
  • stock options
  • learning budget
  • home office budget & IT equipment
  • budget for local in-person social events or co-working spaces

How you’ll plan your day (and life)

We work async at Remote which means you can plan your schedule around your life (and not around meetings). Read more at remote.com/async.

You will be empowered to take ownership and be proactive. When in doubt you will default to action instead of waiting. Your life-work balance is important and you will be encouraged to put yourself and your family first, and fit work around your needs.

If that sounds like something you want, apply now!

How to apply

  1. Please fill out the form below and upload your CV with a PDF format.
  2. We kindly ask you to submit your application and CV in English, as this is the standardised language we use here at Remote.
  3. If you don’t have an up to date CV but you are still interested in talking to us, please feel free to add a copy of your LinkedIn profile instead.

We will ask you to voluntarily tell us your pronouns at interview stage, and you will have the option to answer our anonymous demographic questionnaire when you apply below. As an equal employment opportunity employer it’s important to us that our workforce reflects people of all backgrounds, identities, and experiences and this data will help us to stay accountable. We thank you for providing this data, if you chose to.

At Remote, we embrace AI as a valuable tool while prioritizing human creativity and authenticity. We look forward to meeting candidates who balance innovation with genuine expertise and experience. To learn more about Remote's AI guidelines check see here. 

Please note we accept applications on an ongoing basis. 

Apply for this job

*

indicates a required field

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf

Select...
Select...
Select...
Select...
Select...
Select...
Select...
Select...
Select...

When you apply to a job at Remote on this site, the personal data contained in your application will be collected by Remote, which consists in a network of legal entities. However, for data protection purposes the entities in control of all personal data processed in connection with your application are:

  • Remote Europe Holding, B.V., a company registered in the Netherlands under number 7403597, at Kraijenhoffstraat 137A, 1018RG Amsterdam, The Netherlands; and
  • Remote Technology Services, Inc., a company registered in the United States of America under number 7946800 at 1209 Orange St, Wilmington, DE 19801;

collectively referred to as 'Controller'.

Controller’s data protection is handled by our Data Protection Officer, who can be contacted at dpo@remote.com. Your personal data will be processed under Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR) for the purposes of managing the Controller’s recruitment related activities, which include setting up and conducting interviews and tests for applicants, evaluating and assessing the results thereto, and as is otherwise needed in the recruitment and hiring processes. Such processing is legally permissible under Art. 6(1)(f) of GDPR as necessary for the purposes of the legitimate interests pursued by the Controller, which are the solicitation, evaluation, and selection of applicants for employment.

Your personal data will be stored with Greenhouse Software, Inc., a cloud services provider located in the USA and engaged by the Controller to help manage its recruitment and hiring process on the Controller’s behalf. Accordingly, if you are located in the EU, your personal data will be transferred to the United States once you submit it through this website. Greenhouse Software, Inc. is an active participant the EU-U.S. Data Privacy Framework program.

If your application is successful, the Controller will make an offer for employment which may be conditional on you passing a few additional checks, such as an ID verification check and employment history check. We conduct these checks via Veremark Ltd (United Kingdom) and Persona Identities, Inc. (USA). You will receive an additional notice if and when the Controller requires these checks.

If you are applying for a position reserved for persons with disabilities, then please be aware that we will ask you to provide documentation to validate your disability status. Your sensitive data will be processed to comply with our legal obligations in the field of employment and social security and social protection law.

Your personal data will be retained by the Controller as long as the Controller determines it is necessary for its legitimate interest under 6(1)(f) of GDPR *(to evaluate your suitability for the role you are applying for) but in any event for no longer than a year.

Under GDPR, you have the right to request access to your personal data, to request that your personal data be rectified or erased, and to request that processing of your personal data is restricted. You also have the right to object and the right to lodge a complaint with a data protection authority.

Please acknowledge this Privacy notice:

Voluntary Self-Identification Questions

Voluntary Self-Identification

Remote is an Equal Employment Opportunity employer and as such it’s important to us that our workforce reflects people of all backgrounds, identities, and experiences.Through the below self-identification survey, we invite you to share your demographic information.

This information will be used to ensure that our hiring process is inclusive and that people of all backgrounds are represented in our talent pool.

All answers are anonymous and will not be tied to your job application or candidate profile.
The data will be aggregated and only used internally to inform our hiring strategies and processes to ensure we are actively working toward creating access to opportunities among under-represented groups and increasing our teams’ diversity. 

The access to the collected data is limited on a need-to-know basis.
These questions are optional and voluntary, and will not have any impact on hiring outcomes.

Visit the Remote Handbook to read more about how diversity, equity, and inclusion are a way of life at Remote.

Select...
Select...
Select...
Select...
Select...