{"id":203527,"url":"https://alion.io/job/oanda-senior-application-security-engineer","title":"Senior Product Security Engineer","company":{"id":97363,"name":"OANDA","domain":"oanda.com","url":"https://alion.io/company/oanda-2","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Kraków, Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":56000,"max_usd":102000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":29},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"C++","optional":false},{"name":"CI/CD","optional":false},{"name":"Defense in Depth","optional":false},{"name":"Docker","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"JavaScript","optional":false},{"name":"Kubernetes","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-08-21T00:00:00Z","employer_posted_date":"2026-09-30","last_verified_at":"2026-10-29T01:45:54Z","board_verified":true,"closed_at":null,"days_open":69,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":69},"description":"Fancy helping to shape the future of FinTech?\nWe have always been innovators. In 1996 we were the first company to share exchange rate information, free of charge on the internet. Today, we are a world leading online trading group.\nJoin us to:\nHelp build the future of online trading \nBe part of a culture driven by integrity and global impact\nBecome part of an award-winning company - check out our full list of awards here\nWe are only as good as our people. Luckily, our people are the best. Join us!\nHow do we work?\nThe Senior Product Security Engineer is a hands-on security expert with strong development experience who champions secure software development practices across OANDA. You will work directly with engineering teams to embed security into the SDLC, lead threat modeling and design reviews, build security tooling and automation, and develop the secure coding standards that keep our platform secure. This role is critical to pushing security left-making it a natural part of how we build rather than a gatekeeping function.\nIn this role, you will:\nLead threat modeling, design reviews, and code review for application security vulnerabilities across development teams. Develop and maintain secure coding standards, practices, and guidelines specific to our tech stack (JS, Go, Python, C++, Java).\nBuild and contribute directly to security-critical components and features. Partner with engineers to identify, track, and remediate application security issues, from design to production.\nImplement and operationalize DevSecOps tooling across the development pipeline (SAST, DAST, composition analysis, fuzzing). Automate security workflows to make security checks seamless for developers.\nManage application security incident response and root cause analysis. Conduct security testing, penetration assessments, and tabletop exercises to identify and remediate vulnerabilities before they reach production.\nEvaluate and mitigate supply chain risks by tracking third-party library vulnerabilities, security advisories, and dependency updates. Maintain secure dependency management practices.\nBuild and expose security metrics, monitoring, and alerting for application and infrastructure security. Create transparency into security posture across the platform.\nMentor developers in secure coding practices through hands-on engagement, training, and code reviews. Foster a culture where security is owned by the entire engineering organization.\nStay current with industry best practices, emerging threats, and new attack vectors. Participate in security conferences and bring back learnings to OANDA.\nWork in both on-premise and cloud environments (GCP). Harden application infrastructure, container security (Docker/Kubernetes), and cloud configurations. Apply defense-in-depth across all layers.\nSupport regulatory compliance and audit responses related to application and product security. Advise on security requirements for SOC 2, ISO 27001, GDPR, and industry-specific standards.\nWhat skillset you need, to be successful in this role:\nBachelor's degree in Computer Science, Computer Engineering, or related field.\n2-5 years of professional development experience with at least 1-2 years focused on application security, secure SDLC, or product security.\nProficiency in at least 2-3 of our primary languages (Java, Python, Go, JavaScript, C++). Strong understanding of secure coding practices and common vulnerabilities (OWASP Top 10).\nHands-on experience with security testing tools and methodologies (SAST, DAST, code review, penetration testing). Knowledge of threat modeling and secure design principles.\nWorking knowledge of infrastructure concepts (networking, databases, container security, cloud platforms). Experience with CI/CD pipelines and DevOps practices.\nFamiliarity with security standards (SOC 2, ISO 27001, NIST) and privacy regulations (GDPR). Experience with regulatory compliance and audit support is a plus.\n___\nAt OANDA, to help us efficiently process applications, we use AI-driven tools to help source and rank candidates based on professional experience and skills. While these tools provide recommendations, our recruitment process remains human-centric: all final shortlisting and hiring decisions are made by OANDA team. You have the right to request a human review of your application.\nOANDA Global Corporation is a diverse and global team with offices around the world. We value the unique skills and experiences each individual brings to OANDA. We are committed to creating and sustaining a collegial work environment in which all individuals are treated with dignity and respect and one which reflects the diversity of the community in which we operate. We provide an inclusive and accessible environment for everyone. Candidates selected for an interview will be contacted directly. If you require accommodation during the recruitment and selection process, please let us know. We will work with you to provide as seamless a recruitment experience as possible.\nLearn more about our culture here.\nReview OANDA Privacy Policy and learn more about how we treat your personal data and protect your privacy.","description_format":"text","description_chars":5152,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Currency Exchange & FX Payments","Forex & CFD Brokers"],"lifecycle":[{"event":"open","at":"2026-09-05T01:27:54Z"}],"visa":[],"liveness":{"score":28,"band":"fade","label":"Fading","p_open":1,"p_active":0.778,"p_room":0.36,"age_days":69,"expected_fill_days":42,"reasons":["conf:4","velocity","win:tail","crowd:"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/oanda-senior-application-security-engineer","json_url":"https://alion.io/job/oanda-senior-application-security-engineer.json","meta":{"generated_at":"2026-10-29T11:44:47Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17747,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":97363},"rest":"https://alion.io/mcp/rest/get_company?id=97363"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Foanda-senior-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Foanda-senior-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Foanda-senior-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/oanda-senior-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Foanda-senior-application-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":203527}},{"tool":"search_jobs","arguments":{"company":"oanda.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":203527},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}