Solidgate is hiring an Application Security Engineer

About the Role

As an Application Security Engineer, you will play a key role in shaping the security posture of a rapidly evolving financial technology platform. Your focus will be on integrating security deeply into the software development lifecycle, ensuring resilience across a cloud-native architecture composed of over 120 microservices.

What You'll Do

  • Develop and promote secure coding standards, working closely with development teams to ensure broad adoption
  • Lead threat modeling sessions during design and architecture phases to identify and address risks early
  • Implement and refine automated security testing across the pipeline, including static, dynamic, dependency, and secrets scanning
  • Integrate security checks into CI/CD workflows to enable fast, secure delivery
  • Conduct regular security assessments using frameworks like OWASP ASVS and OWASP SAMM to measure and improve maturity
  • Oversee the end-to-end vulnerability management process—from triage and prioritization to remediation guidance and verification
  • Coordinate external penetration tests and manage bug bounty initiatives
  • Identify and help resolve security gaps in cloud environments and delivery pipelines

What We're Looking For

  • Minimum of 2 years in application or product security roles
  • Proven experience addressing OWASP Top 10 risks and conducting secure code reviews
  • Hands-on use of SAST, DAST, and related tools within CI/CD environments
  • Strong grasp of web application and API security principles
  • Ability to collaborate effectively with engineers, offering guidance without slowing innovation

Nice to Have

  • Experience securing containerized environments and cloud infrastructure
  • Familiarity with DevSecOps and shift-left methodologies
  • Track record of automating security workflows
  • Background in software development or deep collaboration with engineering teams

Benefits

You’ll enjoy over 30 days off annually, unlimited sick leave, and comprehensive health coverage. The role includes wellness benefits, access to professional development courses and conferences, company-provided Apple equipment, and free daily meals. A referral bonus is available when you help bring qualified candidates onto the team.

Our Culture

We support builders shaping the digital economy. Our environment encourages ownership, curiosity, and experimentation. Security is a shared mission—approached through collaboration, not control. You’ll work in a space where impact is visible, questions are welcomed, and partnership drives progress.

Required Skills
SASTDASTDependency scanningSecrets scanningCI/CD securityCloud-native platformsMicroservicesOWASP Top 10OWASP ASVSOWASP SAMMSecure code reviewsThreat modelingWeb application securityAPI security SASTDASTDependency scanningSecrets scanningCI/CD securityOWASP ASVSOWASP SAMMCloud-native platformsMicroservicesSecure code reviewsThreat modelingWeb application securityAPI security
Freelancing without stability?

Get steady projects, keep your freedom

Iglu connects you with international clients and handles contracts, payments, and admin. You get consistent work and flexibility — no more chasing invoices or worrying about gaps.

Consistent client projects
Contract & payment management
Flexible work schedule
Revenue-sharing compensation
See open positions
Work from anywhere
About company
Solidgate
Solidgate empowers outstanding entrepreneurs to build exceptional internet companies by providing the financial infrastructure they deserve. The company aims to become the #1 payments orchestration platform in the world.
All jobs at Solidgate Visit website
Job Details
Category security
Posted 3 months ago