Python Engineer (AppSec)

About the role

We are looking for a Python Application Security Engineer to automate security controls and integrate application security into software development and cloud workflows.

The mandatory requirements are 3+ years in software engineering and security implementation or architecture, strong Python skills, experience with Wiz or similar CSPM tools, deploy-time IaC checks, runtime CSPM checks, and autonomous execution; upper-intermediate English is required. Application threat modeling and AI security automation are a plus.

Must haves

• 3+ years of experience combining software engineering experience, security implementation and/or architecture experience.
• Strong coding and architectural proficiency in Python (for security automation and scripting).
• Hands-on experience or familiarity with Wiz, Prisma Cloud, or similar tools for cloud security posture management and threat detection.
• Implementation experience with deploy-time checks against Infrastructure as Code (IaC) / Terraform .
• Implementation experience with runtime checks through Cloud Security Posture Management (CSPM) .
• Fully autonomous execution capability , requiring no daily supervision to map out and build automated security runbooks.
• Upper-intermediate English level.

Nice to haves

• Deep, hands-on expertise deploying and tuning modern application security testing tools ( SAST, DAST, SCA ) and integrating them into complex CI/CD orchestration ecosystems.
• Experience integrating LLMs, AI agents, or automated coding assistants to streamline vulnerability triaging or secure code generation.
• Advanced application threat modeling experience.
• Ability to confidently read, review, and secure enterprise source Java code.

What you will do

• Pipeline Integration: Write and maintain the scripts necessary to integrate security gates (SAST, DAST, SCA) seamlessly into the CI/CD pipeline.
• Security Data Triage: Continuously tune and configure existing security scanning tools to eliminate false positives and deliver high-confidence alerts.
• Baseline Automation: Assist in coding and deploying automated hardened baselines and secure coding patterns.
• Code-Level Remediation: Work directly with product development teams to provide actionable, code-level remediation guidance in Java and Python.

Perks

• Growth without limits: build your skills through mentorship, internal TechTalks, challenging projects, and a dedicated annual learning budget
• Competitive compensation: get recognition that reflects your skills and impact, with regular performance and compensation reviews
• Flexibility: work 100% remotely with flexible hours that support focus, autonomy, and a healthy work rhythm
• Meaningful, modern projects: build impactful products using modern technologies alongside global teams and leading brands
• Collaborative culture: join a supportive environment with zero micromanagement where ideas are welcomed and contributions are recognized
• Well-being & support: access local well-being programs and people-focused support tailored to your location