Skip to content

Open nowFirst seen 29 hours ago

Senior Application Security Engineer

inDriver150 open roles

Where
Limassol
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Application Security EngineerinDriver · Limassol
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on inDriver's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.5% of postings close within 7 days. Measured by our own scanner across the market. inDriver postings stay open a median of 1 days.

Share of postings closed within
  1. 2.0%1 day
  2. 4.3%3 days
  3. 11.5%7 days
  4. 18.1%14 days
  5. 35.6%30 days
  6. 44.6%60 days
This job: first seen 29 hours ago

inDriver median: 1 days open

The posting

We are looking for an Application Security Engineer in the AppSec team.

As a Senior Application Security Engineer at inDrive, you will own whole areas of our AppSec program, from security requirements and design reviews to controls that work in production. You will work with product, platform and infrastructure teams on new architecture, AI systems and the security of our apps and services. The role fits a hands-on engineer who reviews code and architecture, leads work across several teams and makes security decisions based on data.

Key Responsibilities

  • Own one or more areas of the AppSec program end to end, including the plan, the risks and the metrics.
  • Run security design reviews and threat modeling of new features, services and AI systems, and defend security requirements at the architecture committee.
  • Assess the security of web, mobile and API applications and find variants of confirmed vulnerabilities across other services.
  • Coordinate external security assessments and bug bounty findings, from triage and prioritisation with teams to fix verification.
  • Design secure authentication and authorization between users, services and internal tools together with platform teams.
  • Choose, pilot and tune security tools, and keep only those that pay off in real findings.
  • Turn incidents and assessment results into lasting controls, policies and secure defaults for developers.
  • Consult development teams on complex security issues and take shifts in AppSec duty for Critical and High incidents.

Skills, Knowledge and Expertise

  • Higher education in IT, preferably in information security.
  • Knowledge of mobile application security on Android and iOS, client-server trust, app integrity and protection against bots and account takeover.
  • Deep knowledge of web and API security, including authentication and authorization flaws, SSRF, injections and business logic issues, and the ability to find variants of a vulnerability class across many services.
  • Strong understanding of identity and access, OAuth 2.0, OIDC, JWT, signing key rotation, mTLS, service-to-service authentication and SSO.
  • Understanding of security risks of AI systems and LLM agents, such as prompt injection, excessive tool permissions and agent access to sensitive data, and practical use of AI in your own security work.
  • Practical understanding of cloud-native infrastructure, Kubernetes, containers, API gateways and AWS.
  • Experience in threat modeling and security design review of new features and architecture.
  • Understanding of vulnerability management and risk, including severity, SLA, compensating controls and risk acceptance.
  • Ability to read and review code in at least one language, preferably Golang.
  • Track record of leading projects with two or more teams from a requirement to a verified fix, and clear written English.
  • Experience with secrets and key management, rotation and response to credential leaks.

Nice to have

  • Knowledge of software supply chain security, dependencies, CI/CD pipelines and source control platform hardening.
  • Experience tuning SAST, DAST and SCA tools for precision and judging a tool by noise and cost per real finding.

Why join us

  • Help us challenge injustice by creating fair choices for millions of people across 47 countries.
  • Develop your professional skills with access to mentoring, career consulting, and learning programs.
  • Collaborate with teams around the world and gain international experience through our Global Talent Exchange Program.
  • Engage in company-wide challenges, awards, sports activities, employee-led social impact and volunteering projects.
  • Work alongside people who take initiative, speak openly, and challenge themselves to grow.
  • Improve your language skills through co-financed courses and internal speaking clubs.
  • Annual salary from 70 700 EUR gross.

Final benefits may vary depending on the location.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against inDriver's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on inDriver's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    inDriver's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.