Application Security Engineer

We are looking for a Application Security Engineer to join our team. In this role, you will act as the bridge between Security and Engineering, helping us secure a diverse ecosystem of 200+ services and critical systems.

We are not looking for a "policeman" who simply blocks releases. We are looking for a partner—someone who can read code, understand the developer’s perspective and help us build security directly into our development lifecycle using automation and empathy.

If you are a Developer looking to specialize in Security or a Security Engineer who loves to build rather than just break, this is the role for you.

Responsibilities

• Collaborate with DevOps to integrate and tune open-source security tools (SAST, SCA, Secret Scanning etc.) into our GitLab CI/CD pipelines.
• You will be the primary filter for security alerts. You will triage findings to ensure developers only receive high value, "True Positive" issues; we respect our engineers' time.
• Conduct Threat Modeling for new features and perform architectural reviews on legacy systems to identify logic flaws that automated tools miss.
• Act as a consultant to our Tech Leads. Explain why a vulnerability matters and help them architect the fix in a way that supports business speed.
• Promote secure coding practices through documentation, friendly guidance, and knowledge sharing.

Requirements

• 5+ years of hands-on experience in software development (Java, Python, PHP, or Node.js). You must be able to read and understand code.
• Familiarity with OWASP Top 10 and common web vulnerabilities (XSS, SQLi, IDOR). You know how to find them and how to fix them.
• Experience with CI/CD tools (GitLab CI, Jenkins) and a desire to automate manual tasks.
• You can explain technical risks to non-security stakeholders without arrogance. You understand that business delivery is the priority.
• Experience with tools like Trivy, Semgrep, SonarQube, AI open-source solutions or similar is a plus.

With us you will

• Be a part of a top-tier team of professionals, work on global projects that reach millions worldwide, create complex one-of-a-kind in-house products and solutions;
• Get opportunities for professional development: learn new skills with online courses, broaden your network in local and international conferences, receive mentoring;
• Enjoy our learning-oriented culture: learn and exchange ideas in lectures and workshops led by your colleagues and team leaders;
• Have flexible working hours and plan your day its all about the teamwork and performance;
• Get extra benefits for your health and well-being; we will fully cover your health insurance (dentistry, out-patient treatment, etc.), organize well-being lectures and workshops to promote and support self-care, arrange an office yoga class, offer to take part in vaccination days in the office, and much more;
• Get treated with delicacies at the office with weekly snack days, monthly morning brunches, and daily supply of fresh fruit and delicious coffee;
• Enjoy a variety of employee discount programs and have fun at monthly internal activities and celebrations;
• Work from a spacious, modern, and well-equipped office in the very heart of Riga, with parking space for bikes or scooters.

Please note that the processing of your personal data takes place in accordance with the privacy notice, which could be found here - https://dyninno.com/en/privacy-notice-latvia/

Personnel selection is provided by the competence center of the Dyninno group DYNATECH LLC, Reg. No. 40203110019, address: Jeruzalemes Street 1, Riga, LV-1010, license issued by the SEA for the provision of work placement services No.61/2021 (17.11.2021.)