{"id":3453704,"url":"https://alion.io/job/highcraft-io-application-security-engineer","title":"Application Security Engineer","company":{"id":4485889,"name":"HighCraft.io","domain":"highcraft.io","url":"https://alion.io/company/highcraft-io","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"part_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Ukraine"],"countries":["UA"],"hiring_countries":["UA"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Burp Suite","optional":false},{"name":"OWASP","optional":false}],"status":"live","first_seen_at":"2026-10-28T12:13:02Z","employer_posted_date":null,"last_verified_at":"2026-10-28T12:13:02Z","board_verified":false,"closed_at":null,"days_open":6,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":6},"description":"HighCraft is looking for an Application Security Engineer to assess a healthcare platform for practitioners and patients.\n\nThis is an ongoing remote, part-time contract, starting with a security assessment estimated at 40–60 hours. You will then provide security reviews and support as new features and integrations are developed.\n\nWhat you will do\n\n• Perform manual security assessments of web applications and APIs.\n\n• Identify and validate vulnerabilities in authentication, access controls, business logic and data handling.\n\n• Review security-sensitive changes and third-party integrations.\n\n• Document findings with clear evidence, reproduction steps and practical remediation guidance.\n\n• Work with developers to resolve security issues and retest fixes.\n\nWhat we are looking for\n\n• Hands-on experience independently testing authenticated web applications and APIs.\n\n• Practical understanding of OWASP web and API security, authentication, authorization and multi-tenant applications.\n\n• Ability to investigate and validate findings manually using HTTP requests and application behavior.\n\n• Clear technical reporting and practical remediation guidance.\n\n• Upper-Intermediate English (B2), with the ability to discuss findings with developers.\n\n• Ukrainian is required for day-to-day team communication.\n\nExperience with Burp Suite, .NET, Azure or healthcare systems is a plus.\n\nTo apply\n\nPlease include:\n\n• Your relevant web/API security testing experience.\n\n• Your expected hourly rate.\n\n• Your weekly availability and earliest start date.\n\n• A brief, anonymized example of a security issue you identified and how you documented it.","description_format":"text","description_chars":1640,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Ukraine","iso":"UA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security"],"lifecycle":[{"event":"open","at":"2026-10-29T12:21:41Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":6,"expected_fill_days":27,"reasons":["seen:6","win:early"],"computed_at":"2026-11-04T06:34:25Z"},"pay":null,"html_url":"https://alion.io/job/highcraft-io-application-security-engineer","json_url":"https://alion.io/job/highcraft-io-application-security-engineer.json","meta":{"generated_at":"2026-11-04T07:45:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12117,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4485889},"rest":"https://alion.io/mcp/rest/get_company?id=4485889"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhighcraft-io-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhighcraft-io-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhighcraft-io-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/highcraft-io-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhighcraft-io-application-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3453704}},{"tool":"search_jobs","arguments":{"company":"highcraft.io","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3453704},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}