Security Engineer
First seen by Alion on Nov 2, 2026. Billennium scores A on the Alion truth index.
Who we are
Billennium is a global technology company delivering innovative IT solutions and services. We help organizations transform their businesses through technology, combining technical expertise with a collaborative approach and a strong focus on continuous development.
About the role
We are looking for a Professional Application Security Engineer to strengthen our Application Security capabilities. You will work closely with development teams, architects and security professionals to embed security throughout the Software Development Lifecycle. The role combines hands-on application security, secure software development, vulnerability assessment and DevSecOps. You will not only identify security risks, but also help engineering teams understand, prioritize and remediate them in a practical and sustainable way.
Your responsibilities
• Support development teams in integrating security throughout the SDLC and applying secure coding practices.
• Perform and support application security assessments and vulnerability analysis.
• Review and prioritize security findings and provide developers with practical remediation guidance.
• Work with SAST, DAST and SCA solutions, including Semgrep, SonarQube, HCL AppScan, ZAP, Black Duck, Sonatype Lifecycle or comparable tools.
• Contribute to threat modelling, security design reviews and the implementation of established security patterns.
• Integrate and improve application security tools and controls within CI/CD pipelines.
• Support the security of cloud-native applications, containers and Kubernetes environments.
• Help development teams implement relevant security standards, policies and requirements.
• Contribute to security guidance, awareness activities and training materials.
• Continuously improve AppSec processes, tooling and ways of working.
• Communicate vulnerabilities, risks and remediation options clearly to technical and non-technical stakeholders.
Must have
• 4–5 years of relevant professional experience in Application Security, Software Security, secure software development or a closely related area.
• Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Security or a related discipline, or equivalent practical experience.
• Hands-on experience with application security assessments, vulnerability analysis and security testing.
• Practical experience working with software development teams to identify and remediate security issues.
• Software development experience and the ability to write and review secure code.
• Good understanding of OWASP Top 10 and OWASP ASVS.
• Hands-on knowledge of SAST, DAST and SCA, including their integration into CI/CD pipelines.
• Experience with AppSec tools such as Semgrep, SonarQube, HCL AppScan, ZAP, Black Duck or Sonatype Lifecycle, or comparable solutions.
• Intermediate programming or scripting skills in Python, Java or .NET.
• Experience with Git, Jenkins, Docker, Kubernetes or comparable technologies.
• Understanding of cloud-native application security, containers and Kubernetes.
• Knowledge of vulnerability management, risk assessment and security remediation processes.
• Strong analytical and problem-solving skills.
• Ability to translate technical security findings into clear, actionable recommendations.
• Good written and verbal communication skills and a proactive, collaborative approach.
Nice to have
• Hands-on experience with threat modelling and security architecture or design reviews.
• Knowledge of security frameworks and maturity models such as NIST, OWASP SAMM or OWASP DSOMM.
• Relevant Application Security or cybersecurity certifications.
• Understanding of emerging cybersecurity regulations and product security requirements, including the EU Cyber Resilience Act (CRA).
• Experience supporting security awareness initiatives or delivering secure development guidance to engineering teams.
What we offer
• Stable cooperation with an international technology company.
• Opportunity to work on challenging projects using modern technologies.
• Cooperation with experienced specialists in international teams.
• Opportunities to develop your technical expertise and professional competencies.
• A collaborative working environment focused on knowledge sharing and continuous development.
Tech stack
- Application Security, Software Security
- OWASP
- SAST, DAST, SCA
- CI/CD
- AppSec tools
- Python, Java or .NET
- Git
- Jenkins
- Docker
- Kubernetes