{"id":2916511,"url":"https://alion.io/job/indrive-senior-application-security-engineer","title":"Senior Application Security Engineer","company":{"id":235,"name":"inDrive","domain":"indrive.com","url":"https://alion.io/company/indrive","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Pinpoint","truth_index":{"grade":"A","score":100,"open_postings":6,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":19,"computed_at":"2026-11-06T05:58:05Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Limassol, Cyprus"],"countries":["CY"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":70700,"max":null,"currency":"EUR","period":"year","gross":true,"usd_annual":79362},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Go","optional":false},{"name":"Kubernetes","optional":false},{"name":"LLM","optional":false},{"name":"Threat Modeling","optional":false},{"name":"CI/CD","optional":true}],"status":"live","first_seen_at":"2026-10-19T10:45:11Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-11-07T02:47:41Z","board_verified":true,"closed_at":null,"days_open":18,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":18},"description":"We are looking for an Application Security Engineer in the AppSec team.\nAs a Senior Application Security Engineer at inDrive, you will own whole areas of our AppSec program, from security requirements and design reviews to controls that work in production. You will work with product, platform and infrastructure teams on new architecture, AI systems and the security of our apps and services. The role fits a hands-on engineer who reviews code and architecture, leads work across several teams and makes security decisions based on data.\nKey Responsibilities\nOwn one or more areas of the AppSec program end to end, including the plan, the risks and the metrics.\nRun security design reviews and threat modeling of new features, services and AI systems, and defend security requirements at the architecture committee.\nAssess the security of web, mobile and API applications and find variants of confirmed vulnerabilities across other services.\nCoordinate external security assessments and bug bounty findings, from triage and prioritisation with teams to fix verification.\nDesign secure authentication and authorization between users, services and internal tools together with platform teams.\nChoose, pilot and tune security tools, and keep only those that pay off in real findings.\nTurn incidents and assessment results into lasting controls, policies and secure defaults for developers.\nConsult development teams on complex security issues and take shifts in AppSec duty for Critical and High incidents.\n\nSkills, Knowledge and Expertise\nHigher education in IT, preferably in information security.\nKnowledge of mobile application security on Android and iOS, client-server trust, app integrity and protection against bots and account takeover.\nDeep knowledge of web and API security, including authentication and authorization flaws, SSRF, injections and business logic issues, and the ability to find variants of a vulnerability class across many services.\nStrong understanding of identity and access, OAuth 2.0, OIDC, JWT, signing key rotation, mTLS, service-to-service authentication and SSO.\nUnderstanding of security risks of AI systems and LLM agents, such as prompt injection, excessive tool permissions and agent access to sensitive data, and practical use of AI in your own security work.\nPractical understanding of cloud-native infrastructure, Kubernetes, containers, API gateways and AWS.\nExperience in threat modeling and security design review of new features and architecture.\nUnderstanding of vulnerability management and risk, including severity, SLA, compensating controls and risk acceptance.\nAbility to read and review code in at least one language, preferably Golang.\nTrack record of leading projects with two or more teams from a requirement to a verified fix, and clear written English.\nExperience with secrets and key management, rotation and response to credential leaks.\nNice to have\nKnowledge of software supply chain security, dependencies, CI/CD pipelines and source control platform hardening.\nExperience tuning SAST, DAST and SCA tools for precision and judging a tool by noise and cost per real finding.\n\nWhy join us\nHelp us challenge injustice by creating fair choices for millions of people across 47 countries.\nDevelop your professional skills with access to mentoring, career consulting, and learning programs.\nCollaborate with teams around the world and gain international experience through our Global Talent Exchange Program.\nEngage in company-wide challenges, awards, sports activities, employee-led social impact and volunteering projects.\nWork alongside people who take initiative, speak openly, and challenge themselves to grow.\nImprove your language skills through co-financed courses and internal speaking clubs.\nAnnual salary from 70 700 EUR gross.\nFinal benefits may vary depending on the location.","description_format":"text","description_chars":3844,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Sports activities"],"hiring_locations":[{"name":"Cyprus","iso":"CY","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Courier Services","Ride Hailing","Local Services Marketplaces"],"lifecycle":[{"event":"open","at":"2026-10-20T10:45:11Z"}],"visa":[],"liveness":{"score":65,"band":"ok","label":"Likely open","p_open":1,"p_active":0.861,"p_room":0.75,"age_days":17,"expected_fill_days":19,"reasons":["conf:1","velocity","win:late","comp:brand"],"computed_at":"2026-11-06T05:58:05Z"},"pay":{"stated_usd_annual":79362,"is_top_pay":false},"html_url":"https://alion.io/job/indrive-senior-application-security-engineer","json_url":"https://alion.io/job/indrive-senior-application-security-engineer.json","meta":{"generated_at":"2026-11-07T04:55:05Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11986,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":235},"rest":"https://alion.io/mcp/rest/get_company?id=235"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Findrive-senior-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Findrive-senior-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Findrive-senior-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/indrive-senior-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Findrive-senior-application-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2916511}},{"tool":"search_jobs","arguments":{"company":"indrive.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2916511},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}