{"id":2244344,"url":"https://alion.io/job/ccbill-application-security-engineer","title":"Application Security Engineer","company":{"id":1785092,"name":"CCBill","domain":"ccbill.com","url":"https://alion.io/company/ccbill","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":{"label":"CET","utc_offset_min":1,"utc_offset_max":1},"hiring_geo_confidence":"explicit","locations":["Serbia"],"countries":["RS"],"hiring_countries":["RS"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":35000,"max_usd":103000,"period":"year","method":null,"sample_n":4493},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"Bitbucket","optional":false},{"name":"Burp Suite","optional":false},{"name":"C#","optional":false},{"name":"CI/CD","optional":false},{"name":"CWE","optional":false},{"name":"GitLab","optional":false},{"name":"JavaScript","optional":false},{"name":"Jenkins","optional":false},{"name":"Metasploit","optional":false},{"name":"Nessus","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"Perl","optional":false},{"name":"Python","optional":false},{"name":"Wireshark","optional":false}],"status":"live","first_seen_at":"2026-09-15T00:00:00Z","employer_posted_date":null,"last_verified_at":"2026-09-15T00:00:00Z","board_verified":false,"closed_at":null,"days_open":27,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":27},"description":"CCBill is an online payment services provider used by more than 30,000 websites globally that supports the needs of both new and established businesses in the e-commerce and online space.\n\nWe are seeking an Application Security Engineer to support the secure development of internally developed applications. The successful candidate will perform application security testing, code reviews, threat modelling and vulnerability assessments while supporting the integration of security controls into the software development lifecycle.\n\nThe role will work closely with the development, architecture and Information Security team to identify and remediate security risks and improve the overall security posture of applications.\n\nLocation: Serbia\n\nWorking Hours: Monday to Friday (40 hours); 1PM-9PM CET, fully remote\n\nKey Job Requirements:\nApplication Security Testing:\n\nPerform manual and automated security assessments of web applications and APIs.\n\nConduct application penetration testing to identify vulnerabilities, security weaknesses and configuration issues.\n\nDocument findings, remediation recommendations and risk ratings in clear technical reports.\n\nValidate remediation activities through re-testing\n\nReference: X5o04Fsbq6tja4AMfPy9mQFk7j0TdzSyfVeEsjo7BTpQ7jnkAZT9C5S_2RbbwU0o\n\nSecure Development:\n\nParticipate in threat modelling exercises and security design reviews.\n\nPerform security-focused source code reviews of internally developed applications.\n\nSupport developers in understanding and remediating identified vulnerabilities.\n\nPromote secure coding practices and security awareness across development teams.\n\nDevSecOps and Security Automation\n\nSupport the implementation and operation of security testing within CI/CD pipelines.\n\nAssist with the deployment and tuning of:\n\nStatic Application Security Testing (SAST)\n\nDynamic Application Security Testing (DAST)\n\nSoftware Composition Analysis (SCA)\n\nSecrets detection controls\n\nContribute to security automation initiatives using Jenkins, GitLab and Bitbucket.\n\nVulnerability Management\n\nTrack and manage vulnerabilities identified during security testing activities.\n\nWork with development teams to prioritise and remediate findings.\n\nAssist in assessing application security risks and recommending appropriate mitigation measures.\n\nCollaboration\n\nWork closely with development, architecture, infrastructure, and Information Security teams to improve application security.\n\nSupport security reviews prior to production deployments.\n\nContribute to the continuous improvement of application security standards, processes and procedures\n\nKey Skills & Qualifications:\nRequired\n\nMinimum 3 years of experience in application security, penetration testing, software development or a related information security role.\n\nExperience performing web application security assessments and penetration testing.\n\nUnderstanding of secure software development practices.\n\nExperience reviewing source code and identifying common security vulnerabilities.\n\nStrong knowledge of:\n\nOWASP Top 10\n\nCWE\n\nNIST security guidance\n\nSecure coding principles\n\nTechnical Skills\n\nKnowledge of web technologies, APIs, databases and networking concepts.\n\nFamiliarity with programming languages such as:\n\nJava\n\n.NET/C#\n\nPython\n\nJavaScript\n\nPerl\n\nUnderstanding authentication, authorisation and session management concepts.\n\nTools\n\nExperience with some of the following:\n\nBurp Suite\n\nOWASP ZAP\n\nNessus\n\nMetasploit\n\nWireshark\n\nSAST and DAST tools\n\nCI/CD and DevSecOps\n\nExposure to:\n\nJenkins\n\nGitLab\n\nBitbucket\n\nAgile development environments\n\nPersonal Attributes\n\nStrong analytical and problem-solving skills.\n\nEffective verbal and written communication skills.\n\nAbility to work collaboratively within cross-functional teams.\n\nWillingness to learn and develop expertise in application security and DevSecOps practices.\n\nProactive, strategic thinker who can turn concepts into actionable plans.\n\nAdvocates security improvement initiatives while understanding business priorities and constraints.\n\nDemonstrated experience in mentoring, coaching, and supporting the growth of a diverse and distributed team.","description_format":"text","description_chars":4133,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Serbia","iso":"RS","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Commerce","Payment Processing & Gateways"],"lifecycle":[{"event":"open","at":"2026-10-11T01:11:16Z"}],"visa":[],"liveness":{"score":31,"band":"fade","label":"Fading","p_open":0.85,"p_active":0.657,"p_room":0.55,"age_days":27,"expected_fill_days":24,"reasons":["seen:27","win:tail"],"computed_at":"2026-10-12T06:55:09Z"},"pay":null,"html_url":"https://alion.io/job/ccbill-application-security-engineer","json_url":"https://alion.io/job/ccbill-application-security-engineer.json","meta":{"generated_at":"2026-10-12T16:18:40Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":26014,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1785092},"rest":"https://alion.io/mcp/rest/get_company?id=1785092"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fccbill-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fccbill-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fccbill-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ccbill-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fccbill-application-security-engineer"}]}