{"id":3454681,"url":"https://alion.io/job/privatbank-ua-application-security-engineer","title":"Application Security Engineer","company":{"id":1806436,"name":"privatbank.ua","domain":"privatbank.ua","url":"https://alion.io/company/privatbank-ua","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Ukraine"],"countries":["UA"],"hiring_countries":["UA"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"DNS","optional":false},{"name":"GitLab","optional":false},{"name":"Jenkins","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP SAMM","optional":false},{"name":"SDL","optional":false},{"name":"Threat Modeling","optional":false},{"name":"C","optional":true}],"status":"live","first_seen_at":"2026-10-19T12:59:16Z","employer_posted_date":null,"last_verified_at":"2026-10-19T12:59:16Z","board_verified":false,"closed_at":null,"days_open":15,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":15},"description":"PrivatBank is the largest bank in Ukraine and one of the most innovative banks around the world. It holds a leading position for all the financial indicators in the area and comprises about a quarter of the whole banking system of our country.\nWe are looking for an Application Security Engineer. We are searching for the person who seeks to work in a dynamic environment and shares the values of initiative, openness and mutual trust.\nWe are striving to find a goal-oriented and multitask professional who would be focused on making good results and high quality.\nRequirements:\n\nAt least 3 years of experience in application security or related fields such as penetration testing and security architecture\n\nProficiency in using security scanners such as SAST, DAST, SCA, Secret Detection, and Container scanning\n\nExperience integrating security scanners in CI/CD pipelines using Jenkins for GitLab\n\nCertifications such as CEH, OSCP, CSSLP, AWS Certified Security Specialty, etc. is preferred\n\nBackground in software development, including roles such as Developer, Business Analyst, Architect, DevOps, etc\n\nKnowledge of Secure Software Development Life Cycle (S-SDLC) and frameworks like OWASP SAMM, BSIM, and Microsoft SDL\n\nFamiliarity with the software development process and stages\n\nBasic understanding of software code\n\nKnowledge of key infrastructure components like databases, queues, application servers, load balancers, NoSQL, etc\n\nUnderstanding of major types of vulnerabilities\n\nUnderstanding of software architecture\n\nKnowledge of network protocols such as DNS, HTTP/S, SMTP, SSH, and FTP\n\nAbility to independently research information and solve complex problems\n\nCritical thinking skills\nResponsibilities:\n\nConduct security audits using the OWASP SAMM framework to assess current practices, identify gaps, and evaluate compliance levels within the organization\n\nDevelop and implement strategic plans aimed at enhancing security maturity levels throughout the organization, with gradual improvements\n\nApplication security governance and metrics\n\nCollaborate with various team members, including developers and top management, to advocate and implement application security best practices\n\nImprove our application security management platform\n\nManage security architecture, focusing on integrating security at every stage of the software development lifecycle\n\nIntegrate and oversee security automation tools to enhance security processes and reduce manual error\n\nOversee security testing across various stages of software development to identify and mitigate potential security vulnerabilities\n\nEngage in threat modeling activities to predict and neutralize potential security threats before they impact the system\n\nEnsure compliance with relevant industry standards and regulations by regularly updating security policies and standards\n\nTrack and manage software defects to ensure timely resolution of security-related issues\n\nDevelop and conduct training and awareness programs to enhance security knowledge and practices across the organization\n\nSpearhead the secure integration of CI/CD practices into software development processes to ensure continuous security\n\nUse cloud services for application security\nWe offer:\n\nWork in the largest and most innovative bank of Ukraine\n\nOfficial employment and 24+4 calendar days of vacation\n\nSick leave compensation\n\nMedical Insurance\n\nCompetitive salary\n\nBonuses, premium according to company policy\n\nCorporate training\n\nModern comfortable office\n\nInteresting projects, ambitious tasks and dynamic growth\n\nCorporate financial assistance in critical situations\n\nA friendly professional and strong team\n\nPossibility of remote work format\nPrivatBank is open to support and employ veterans and people with disabilities.\n\nWe believe that discrimination due to health conditions, physical abilities, age, race and ethnicity, gender or marital status is unacceptable.\n\nWe are ready to train veterans and candidates with disabilities without banking experience.","description_format":"text","description_chars":4010,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Health insurance"],"hiring_locations":[{"name":"Ukraine","iso":"UA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security"],"lifecycle":[{"event":"open","at":"2026-10-29T12:21:41Z"}],"visa":[],"liveness":{"score":67,"band":"ok","label":"Likely open","p_open":0.85,"p_active":0.87,"p_room":0.9,"age_days":15,"expected_fill_days":30,"reasons":["seen:15","velocity","win:mid"],"computed_at":"2026-11-04T06:34:25Z"},"pay":null,"html_url":"https://alion.io/job/privatbank-ua-application-security-engineer","json_url":"https://alion.io/job/privatbank-ua-application-security-engineer.json","meta":{"generated_at":"2026-11-04T09:33:36Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14921,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1806436},"rest":"https://alion.io/mcp/rest/get_company?id=1806436"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fprivatbank-ua-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fprivatbank-ua-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fprivatbank-ua-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/privatbank-ua-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fprivatbank-ua-application-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3454681}},{"tool":"search_jobs","arguments":{"company":"privatbank.ua","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3454681},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}