Application Security Engineer

About the role

We are seeking an Application Security Engineer to join the IT Research & Development team within the Trevolution division of Dyninno Group’s travel business. You will work closely with engineering teams to embed security into the development lifecycle, focusing on automation, AI‑driven initiatives, and a large ecosystem of services.

Key responsibilities

• Integrate and optimise security tools (SAST, SCA, secret scanning, etc.) into CI/CD pipelines (GitLab, Jenkins).
• Review and validate security findings, ensuring developers address critical issues.
• Perform threat modelling and review system architecture to uncover risks beyond automated scans.
• Analyse code to detect and understand security vulnerabilities.
• Collaborate with engineers and tech leads to implement secure, practical solutions.
• Promote secure coding practices through guidance and knowledge sharing.

Required profile

• Ability to read and understand code, preferably in PHP, Node.js, or Golang.
• Experience in software development or application security.
• Solid knowledge of the OWASP Top 10 (XSS, SQLi, IDOR, etc.).
• Familiarity with CI/CD tools such as GitLab or Jenkins.
• Experience with security analysis tools like Semgrep, SonarQube, Trivy, or similar.
• Understanding of secure coding practices and threat modelling.
• Strong communication skills and a collaborative mindset.

Required skills

• PHP
• Node.js
• Golang
• SAST
• SCA
• Secret scanning
• GitLab
• Jenkins
• Semgrep
• SonarQube
• Trivy
• OWASP Top 10
• Threat modelling
• Secure coding practices

What we offer

• Hybrid work model (3 days onsite, 2 days remote).
• Opportunity to work on AI‑driven solutions from idea to product.
• High level of ownership and influence over security implementation.
• Competitive compensation up to 5,000 EUR gross per month.