{"id":21211,"url":"https://alion.io/job/solidgate-application-security-engineer","title":"Application Security Engineer","company":{"id":6021,"name":"Solidgate","domain":"solidgate.com","url":"https://alion.io/company/solidgate","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":94,"open_postings":46,"ghost_share":0.022,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":105,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["Warsaw, Poland","Nicosia, Cyprus","Lviv, Ukraine"],"countries":["PL","CY","UA"],"hiring_countries":["PL","CY","UA"],"hiring_countries_total":3,"salary":null,"salary_estimate":{"min_usd":30000,"max_usd":64000,"period":"year","method":"role_seniority_country_cell","sample_n":8},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP ASVS","optional":false},{"name":"OWASP SAMM","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Shift-Left","optional":true},{"name":"Shift-Left Security","optional":true}],"status":"live","first_seen_at":"2026-01-21T12:25:25Z","employer_posted_date":"2026-01-21","last_verified_at":"2026-10-17T07:11:14Z","board_verified":true,"closed_at":null,"days_open":268,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":268},"description":"Our Mission and Vision\nAt Solidgate, our mission is clear: to empower outstanding entrepreneurs to build exceptional internet companies. We exist to fuel the builders - the ones shaping the digital economy - with the financial infrastructure they deserve. To achieve that, we’re on a bold path: to become the #1 payments orchestration platform in the world.\nWe believe the future of payments is shaped by people who think big, take ownership, and bring curiosity and drive to everything they do. That’s exactly the kind of teammates we want on board.\nWe're building the #1 payment orchestrator in the world - and the names behind us prove it. Clients include Bolt, Ajax, Nova Post, MEGOGO. Trusted by giants like J.P. Morgan. Ranked #2 in the \"Employer of the Year 2026\" award by Forbes Ukraine.\nAbout the Role\nSolidgate builds financial infrastructure for fast-growing internet businesses worldwide. Our platform processes millions of payments daily and operates in a highly regulated fintech environment, where security is a core product requirement - not an afterthought.\nOur engineering organization builds and scales a complex cloud-native platform with over 120 microservices. As the company continues to grow, we are strengthening our security organization and introducing a dedicated Application Security Engineer role.\nThe mission of this role is to keep our business and revenue safe by building security into the way we develop software - from early design decisions to CI/CD pipelines and live production systems.\nThis is a hands-on Application Security role focused on embedding security into the software development lifecycle and reducing real product risks.\nYou will work closely with engineering teams to:\ndesign secure application architectures\n\nimprove secure coding practices\n\ndetect vulnerabilities early in the development lifecycle\n\ncontinuously improve application security as part of everyday engineering work\n\nYou will have a direct impact on how secure software is built across a large microservices ecosystem, influencing standards, tooling, and engineering culture.\nExplore our technology stackhere.\nWhat You Will Own\nAs an Application Security Engineer, you will be responsible for application-level security across our fintech platform, including:\nBuilding and maintaining secure coding standards and supporting their adoptionl across development teams\n\nConducting threat modeling during architecture and design stages\n\nImplementing and improving application security testing, including: SAST, DAST, Dependency and secrets scanning, CI/CD security checks\n\nPerforming regular application security assessments and maturity evaluations (OWASP ASVS, OWASP SAMM)\n\nManaging the full vulnerability lifecycle: triage, prioritization, remediation support, and validation\n\nSupporting external penetration testing and Bug Bounty programs\n\nIdentifying and mitigating security risks in cloud environments and CI/CD pipelines\n\nYou are a great fit if you have\nAt least 2 years of experience in Application Security or Product Security\n\nHands-on experience with OWASP Top 10 vulnerabilities\n\nPractical experience with: secure code reviews, threat modeling, SAST and DAST tools and their integration into CI/CD pipelines\n\nStrong understanding of web application and API security\n\nAbility to communicate clearly with engineers and work as a partner rather than a blocker\n\nNice to Have\nExperience with container security and cloud security tooling\n\nFamiliarity with DevSecOps and shift-left security practices\n\nExperience automating application security processes\n\nBackground as a software engineer or close collaboration with development teams\n\nWhy Join Solidgate?\nBuild security that matters. Lead initiatives that define how security is embedded into our software development lifecycle across multiple teams and products.\nYour expertise counts. Enjoy real autonomy - propose, test, and implement security practices and tooling that directly improve product resilience and reduce risk.\nRoom to experiment. Apply modern AppSec, automation, and shift-left approaches with full support from engineering and security leadership.\nImpact & visibility. See the results of your work directly in more secure products, fewer vulnerabilities, and stronger engineering practices.\nCollaborative environment. Work side by side with experienced, curious engineers who treat security as a shared responsibility and value partnership over gatekeeping.\nThe Extras: 30+ days off, unlimited sick leave, free office meals, health coverage, and Apple gear to keep you productive. Courses, conferences, sports and wellness benefits - all designed for ideas, focus, and fun.\nTomorrow’s fintech needs your mindset. Come build it with us.\nKnow top talent? We’re always on the lookout. Recommend someone for our role, and if they get hired, there’s a bonus waiting for you - simple as that.","description_format":"text","description_chars":4877,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Office meals"],"hiring_locations":[{"name":"Poland","iso":"PL","kind":"country"},{"name":"Cyprus","iso":"CY","kind":"country"},{"name":"Ukraine","iso":"UA","kind":"country"},{"name":"Warsaw","iso":null,"kind":"city"},{"name":"Nicosia","iso":null,"kind":"city"},{"name":"Lviv","iso":null,"kind":"city"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Fraud Detection","Payment Processing & Gateways"],"lifecycle":[{"event":"open","at":"2026-01-21T12:25:25Z"}],"visa":[],"liveness":{"score":13,"band":"cold","label":"Long shot","p_open":1,"p_active":0.452,"p_room":0.28,"age_days":268,"expected_fill_days":105,"reasons":["conf:2","win:tail","crowd:junior"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/solidgate-application-security-engineer","json_url":"https://alion.io/job/solidgate-application-security-engineer.json","meta":{"generated_at":"2026-10-17T07:52:11Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10601,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6021},"rest":"https://alion.io/mcp/rest/get_company?id=6021"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsolidgate-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsolidgate-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsolidgate-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/solidgate-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsolidgate-application-security-engineer"}]}