Senior Application Security Engineer

About the role

Lead threat modeling and secure design reviews for Bykea’s applications and infrastructure, ensuring secure‑by‑default architectures. Drive security‑first practices across the organization by integrating security tools into development pipelines.

Key responsibilities

• Design and implement scalable security solutions to detect and remediate vulnerabilities.
• Integrate SAST/DAST and other security tools within CI/CD pipelines to enable shift‑left security.
• Conduct advanced dynamic (DAST) and static (SAST) analysis across microservices and mobile applications.
• Identify, prioritize, and remediate security risks across products, features, and infrastructure.
• Define and enforce best practices for application security throughout the SDLC.
• Assess and mitigate risks from third‑party libraries and dependencies.
• Lead vulnerability triage and remediation in collaboration with engineering teams.

Required profile

• 5+ years of hands‑on application security experience with measurable improvements.
• Strong proficiency in scripting/development, preferably Python and JavaScript.
• Proven experience integrating and managing security tools (SAST, DAST) in CI/CD environments.
• Solid experience with cloud and infrastructure security (AWS, Kubernetes, Terraform/CloudFormation).
• Deep understanding of web security principles, TLS/SSL, authentication mechanisms, and network protocols.

Required skills

• Python
• JavaScript
• SAST
• DAST
• CI/CD pipelines
• AWS
• Kubernetes
• Terraform
• CloudFormation
• TLS/SSL
• HTTP/HTTPS
• TCP/IP