Application Security Engineer

About the role

The Stepstone Group is looking for an Application Security Engineer to join its Tech Hub in Warsaw. You will work closely with development teams to integrate security tools, remediate application security findings, and manage the Web Application Firewall, while supporting the Security Champions programme.

Key responsibilities

• Integrate security tooling into existing technology stacks and CI/CD pipelines.
• Support developers in triaging and remediating findings from Application Security Testing (AST) tools such as SCA and SAST.
• Own and maintain the Web Application Firewall (WAF), handling issues and optimizing rules.
• Assist development teams in onboarding domains, endpoints, and APIs to the WAF.
• Collaborate on risk, threat, and vulnerability identification through threat‑modelling processes.
• Contribute to the Security Champions programme by delivering sessions and supporting champions.

Required profile

• Proven experience with Application Security Testing (AST) technologies and providing remediation recommendations.
• Strong knowledge of Web Application Firewall (WAF) solutions and their configuration.
• Hands‑on experience integrating security tools into DevOps pipelines, infrastructure automation, and CI/CD processes.
• Ability to work with cross‑functional teams to improve security processes continuously.

Required skills

• Application Security Testing (AST)
• Software Composition Analysis (SCA)
• Static Application Security Testing (SAST)
• Web Application Firewall (WAF)
• CI/CD pipeline integration
• Infrastructure as Code
• Threat Modelling