{"id":2128337,"url":"https://alion.io/job/axa-application-security-engineer-fm","title":"Application Security Engineer (F/M)","company":{"id":2585458,"name":"AXA Partners CEE","domain":"axa-assistance.pl","url":"https://alion.io/company/axa-assistance-pl","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"contractor","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Warsaw, Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":160,"max":215,"currency":"PLN","period":"hour","gross":null,"usd_annual":110000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Angular","optional":false},{"name":"CI/CD","optional":false},{"name":"JavaScript","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Rest API","optional":false},{"name":"Shift-Left","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"TypeScript","optional":false}],"status":"live","first_seen_at":"2026-09-23T08:50:19Z","employer_posted_date":null,"last_verified_at":"2026-09-23T08:50:19Z","board_verified":false,"closed_at":null,"days_open":24,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":24},"description":"AXA IT SolutionsWe are an internal software house operating within the international insurance group AXA. We provide IT solutions for the needs of AXA companies in Europe. We work in English on a daily basis, in close-knit teams, carrying out international development projects.We are looking for an Application Security Engineer (F/M) to join our engineering team and help us build security into the software development lifecycle.\nThis role is an opportunity to move beyond traditional vulnerability management and drive a proactive approach to application security. You will work closely with software engineers, architects, DevOps and security teams to automate security controls, integrate security into CI/CD pipelines, improve secure development practices and help teams build secure-by-design applications.This is how we workin house\nyou have influence on the technological solutions applied\nyou have influence on the product\nyou focus on product development\nagile\nscrum\nWhat we offerThe opportunity to influence technological solutions and product direction in an international financial organization\nAmbitious projects with a high degree of autonomy and responsibility\nA stable, long-term assignment with flexible working hours and a hybrid work model\n\nZakres obowiązków\nOwn and continuously improve the application security posture, embedding security throughout the SDLC.\nMonitor, assess, prioritise, and manage vulnerabilities from penetration testing, SAST, DAST, dependency scanning, bug bounty programmes, and other security assessments, ensuring remediation within agreed SLAs.\nTriage security findings, assess business risk, identify false positives, and provide clear technical justification for decisions.\nDesign and implement scalable security controls, automation, and preventative measures to reduce recurring vulnerabilities and manual remediation.\nDrive a shift-left security approach by integrating automated security testing, policies, and secure development practices into CI/CD pipelines.\nAct as the primary liaison with external penetration testing providers and partner with Group Security on vulnerability management, risk ratings, and remediation requirements.\nProvide expert guidance on securing web applications, APIs, authentication, and cloud-native architectures, particularly .NET and Angular solutions.\nAct as the Application Security SME, promoting secure-by-default design principles across solution delivery.\nMaintain application security standards, policies, and processes aligned with OWASP, NIST, and industry best practices.\nMonitor emerging threats, OWASP trends, attack techniques, and security tooling to address evolving application security risks.\nDeliver secure coding guidance and security awareness to developers, technical leads, architects, and delivery teams.\nReport on application security posture, vulnerability trends, remediation performance, and risk reduction to governance and steering groups.\nWymagania\nStrong practical knowledge of the OWASP Top 10 and common web application attack vectors.\nDeep understanding of securing modern web applications, REST APIs, authentication and authorisation mechanisms (OAuth2, OIDC, JWT).\nExperience implementing and managing SAST, DAST, SCA, API security and penetration testing programmes.\nExperience automating security controls within CI/CD pipelines and software delivery processes.\nStrong knowledge of secure software engineering practices and secure-by-design principles.\nExperience with .NET, Angular, JavaScript/TypeScript, and modern web application architectures.\nAbility to identify strategic security improvements rather than focusing solely on vulnerability remediation.\nStrong stakeholder management skills, with the ability to influence development teams, architects, and security functions.\nHighly motivated, enthusiastic, and capable of working both independently and collaboratively in a team-oriented environment.\nExceptional analytical and problem-solving skills, with attention to detail and a business-focused approach.\nStrong interpersonal skills, with the ability to influence technical decisions and communicate effectively in a fast-paced environment.\nDemonstrates creativity and resourcefulness in presenting solutions to complex security challenges\nTech stack\nOWASP\nWeb applications\nREST API\nSAST\nDAST\nAPI\nSecurity\nTesting\nCD pipelines\n.NET\nAngular\nJavaScript\nTypeScript\nStakeholder management","description_format":"text","description_chars":4424,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Hybrid work"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security"],"lifecycle":[{"event":"open","at":"2026-10-09T00:39:00Z"}],"visa":[],"liveness":{"score":30,"band":"fade","label":"Fading","p_open":0.85,"p_active":0.651,"p_room":0.55,"age_days":23,"expected_fill_days":22,"reasons":["seen:23","velocity","win:tail"],"computed_at":"2026-10-17T05:46:00Z"},"pay":{"stated_usd_annual":110000,"is_top_pay":false},"html_url":"https://alion.io/job/axa-application-security-engineer-fm","json_url":"https://alion.io/job/axa-application-security-engineer-fm.json","meta":{"generated_at":"2026-10-17T23:34:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1877,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2585458},"rest":"https://alion.io/mcp/rest/get_company?id=2585458"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Faxa-application-security-engineer-fm"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Faxa-application-security-engineer-fm"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Faxa-application-security-engineer-fm"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/axa-application-security-engineer-fm\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Faxa-application-security-engineer-fm"}]}