{"id":2733368,"url":"https://alion.io/job/sword-services-developpeur-securite-applicative-appsec","title":"Développeur Sécurité Applicative (AppSec)","company":{"id":2681291,"name":"Sword Services","domain":"sword-services.ch","url":"https://alion.io/company/sword-services-2","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Recruitee","truth_index":{"grade":"B","score":75,"open_postings":3,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-20T05:45:00Z"}},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Geneva, Switzerland"],"countries":["CH"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":94000,"max_usd":165000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":12},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"Checkmarx","optional":false},{"name":"CI/CD","optional":false},{"name":"CVSS","optional":false},{"name":"Docker","optional":false},{"name":"EPSS","optional":false},{"name":"Git","optional":false},{"name":"GitLab CI","optional":false},{"name":"Java","optional":false},{"name":"Kubernetes","optional":false},{"name":"OpenShift","optional":false},{"name":"OWASP ASVS","optional":false},{"name":"OWASP Dependency-Check","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"SBOM","optional":false},{"name":"Snyk","optional":false},{"name":"SonarQube","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-10-16T15:55:10Z","employer_posted_date":"2026-10-16","last_verified_at":"2026-10-20T19:41:41Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"Nous ouvrons un poste de Développeur·se senior en sécurité applicative (AppSec) pour renforcer l’équipe de notre client basé à Genève. Vous contribuerez au déploiement d’une démarche « Security by Design » auprès de plusieurs équipes produit, afin d’intégrer durablement la sécurité dans les phases de conception, de développement et de maintenance des applications.\nResponsabilités du poste\nDéployer la démarche AppSec auprès des équipes produit et intégrer progressivement les applications au dispositif.\n\nConfigurer les outils SAST, DAST et SCA au sein des pipelines CI/CD, puis accompagner les équipes dans leur utilisation.\n\nAnalyser, qualifier et prioriser les vulnérabilités selon leur niveau de risque et leur exploitabilité.\n\nConseiller les équipes de développement dans la remédiation des failles et l’amélioration de la sécurité du code.\n\nFormer les développeurs, référents AppSec et responsables produit au moyen d’ateliers et de supports pédagogiques.\n\nIntégrer les pratiques de sécurité aux rituels Agile, aux revues de code et aux critères de validation.\n\nSuivre les indicateurs AppSec, alimenter les tableaux de bord et contribuer aux instances de gouvernance.\n\nFormaliser les bonnes pratiques relatives aux dépôts de code, à l’open source et à la protection des données sensibles.\n\nRequirements\nDiplôme HES, licence en informatique, diplôme d’ingénieur EPF ou titre fédéral équivalent.\n\nAu moins cinq ans d’expérience en sécurité applicative, avec une maîtrise de l’OWASP Top 10, de l’ASVS, du threat modeling, d’OAuth2/OIDC et de la gestion des secrets.\n\nExpertise pratique des solutions SAST, DAST et SCA telles que SonarQube, Checkmarx, OWASP ZAP, Burp Suite, Snyk ou Dependency-Check.\n\nSolide expérience de l’intégration de contrôles de sécurité dans des pipelines GitLab CI ou des environnements CI/CD comparables.\n\nMaîtrise de la gestion des vulnérabilités fondée sur le risque, notamment CVSS, EPSS, KEV, traitement des faux positifs et suivi de la remédiation.\n\nExpérience du développement Java/Spring, des tests, des revues de code, de Git, des tests d’intrusion applicatifs et des SBOM.\n\nCapacité à piloter plusieurs activités en parallèle, définir des KPI et intervenir dans un environnement Agile et matriciel.\n\nExcellentes aptitudes en communication, pédagogie et conduite du changement, associées à un haut niveau d’autonomie, de rigueur et de discrétion. La connaissance d’ISO/IEC 27034, de Docker, Kubernetes ou OpenShift constitue un avantage.","description_format":"text","description_chars":2477,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"French","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","IT Outsourcing & Dedicated Teams","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-10-16T18:24:13Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":27,"reasons":["conf:2","velocity","win:early"],"computed_at":"2026-10-20T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/sword-services-developpeur-securite-applicative-appsec","json_url":"https://alion.io/job/sword-services-developpeur-securite-applicative-appsec.json","meta":{"generated_at":"2026-10-20T23:30:35Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":27116,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2681291},"rest":"https://alion.io/mcp/rest/get_company?id=2681291"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsword-services-developpeur-securite-applicative-appsec"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsword-services-developpeur-securite-applicative-appsec"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsword-services-developpeur-securite-applicative-appsec"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sword-services-developpeur-securite-applicative-appsec\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsword-services-developpeur-securite-applicative-appsec"}]}