Job details
AppSec architect
Application Security Architect
Place of work
Remote
Employment type
Full-time, Part-time
Start
Immediately
Salary
from 3700 € gross / month + bonuses
Expanding your horizons
We are creating midPoint, the world’s leading open-source identity governance and administration (IGA) platform. Join our expert product engineering team and help with embedding security into every stage of our software development lifecycle. Be a driver for security by design, secure by default and secure on failure principles, lead threat modeling and risk assessments, and improve our SSDLC to ensure compliance with ISO 27001, ENISA and the EU Cyber Resilience Act (CRA) Use your abilities to work on a challenging yet exciting projects with an experienced team by your side from anywhere at any time. Apply today and become one of us!
What you will do
Evolveum attracts extraordinary people who want to do their best work. Make a real impact with the following responsibilities
- Propose continuous improvements to SSDLC processes and tooling to meet evolving security and regulatory requirements with a focus on security by design, secure by default and secure on failure
- Oversight for implementation of cybersecurity principles (security by design, secure by default) in software development processes
- Conduct and support threat modeling and risk assessments in line with risk management frameworks early in the design
- Participate during all phases of the development lifecycle to ensure security architecture and design of the secure applications
- Collaborate with Chief Product Officer (CPO) and developers to embed security in all phases of development lifecycle (requirements, design, coding, testing and deployment)
- Collaborate with CPO (and CISO) on choosing and integrating security testing tools (SAST, DAST, SCA, IaC scanning) into CI/CD pipelines
- Collaborate with CPO, CISO and developers to implement secure coding standards and provide training and guidance on secure design where needed
- Establish security governance, standards and reference architectures aligned with ISO 270001, ENISA and CRA
- Collaborate with CPO, CISO and developers to ensure findings are addressed and lessons learned are embedded into processes
Skills and qualifications
Has what you’ve read so far already hooked you? Check if you have what it takes to excel at this job:
Experience
5+ years of experience in security field targeting software development. Strong understanding of OWASP Top 10, common vulnerabilities (SQLi, XSS, CSRF, RCE, etc.). Hands-on experience with secure coding in one or more languages (Java, Python, etc.). Experience with DevSecOps pipelines and CI/CD integration. Excellent communication skills – ability to explain security issues to both technical and non-technical stakeholders. Certifications: CSSLP, OSWE, CEH, CISSP (with focus on AppSec) as nice to have. Familiarity with ISO 27001, ENISA and EU Cyber Resilience Act (CRA) is an advantage
Software development
Experience with product development is an advantage
Problem solving
A creative approach towards problems and the ability to find a solution
Identity management
Familiarity with the identity management field is an advantage
Enthusiastic attitude
A passion for technology and willingness to understand the details of how things work
Education
A bachelor’s degree (and higher) and/or a proven track record
Language
English skills on the B2 level or higher
Independence
The ability to work independently, in a team, and with customers
what working at Evolveum brings
Benefits you will truly enjoy
Remote first
Work conveniently from home like most of our team, or join the rest of the colleagues in offices located in Bratislava and Košice.
Professional open source
Join one of the biggest open source projects in identity management & governance, and embrace the pure open source philosophy.
Your public profile
Build your own personal brand with pride and nothing to hide. Jump on our open source wave and develop midPoint openly with us.
Self-development
The space for your personal growth at Evolveum is limitless. Use it to the maximum and watch the team support you in doing so.
Freedom at work
It’s all in your hands: enjoy flexible working hours, no middle management watching over your shoulder, and even the software & hardware of your choice.
Room for pet projects
Do you have a vision you would like to work on in addition to your main responsibilities? Use the opportunity to allocate some of your work time to a pet project.
Meritocracy at its best
Count on merit in terms of competency, ability, and achievements when it comes to taking over responsibilities and your position on the team.
Pro-employee environment
Work at a company that values its employees and shows it through possible extra vacation time, financial bonuses, career growth opportunities, and educational resources.
Even a 4-day work week
Join a company that values your grind and results over time spent in front of your screen. Evolveum is open to negotiating your time availability to fit your needs.
Job salary
wage tier
3700 €
From in gross / month + bonuses