OverviewAs AppSec Lead, you establish and drive our Application Security program within Product & Technology. You’ll evangelize AppSec, work with engineers and product managers to design secure products, and own the training and Security Champions initiatives to scale DevSecOps. You will integrate security into the SDLC, guide secure design and coding practices, and manage vulnerability lifecycle across internal and external apps. You’ll stay ahead of AI/LLM security trends and contribute to incident reviews and security playbooks.

Retribuzione / Benefits

Flexi-Week with four-day structureHybrid/remote working setupMonthly work expense allowance and home office furniture packageHealth and wellbeing initiativesAwin Academy training suite for professional growthPeer-to-peer recognition programme

Responsabilità

Secure the SDLC by integrating SAST, DAST and SCA into CI/CD pipelines and IDEs; automate checks to enable early fixesConduct threat modeling and secure design reviews with product and engineering teamsProvide guidance on secure coding, perform targeted code reviews,



and assist with remediationManage vulnerability lifecycle across internal and external apps; track and report findingsSupport bug bounty validation and present vulnerability reports to senior leadersProvide security guidance for AI/ML/LLM features; manage risks like prompt injection and data leakageCollaborate on incident investigations and post-incident mitigation strategiesDrive security culture; deliver trainings, workshops, and contribute to playbooks and standardsResearch and innovate to reduce risks across software supply chain and showcase AI tool usage for security improvements

Requisiti fondamentali

5+ years in application security or related rolesExperience collaborating with engineers and product managers to secure web appsAgile experienceExcellent English communication and interpersonal skillsMentorship and training capabilitiesAbility to work across two departments with multiple touchpointsCoding proficiency in JS, PHP, PythonExperience with Cloud Native environments (AWS), Containers and TerraformHands-on experience with DAST, SAST, SCA, and reporting/dashboarding toolsInterpersonal communicationMentorship and trainingCross-functional collaborationSAST, DAST, SCA toolingCI/CD integrationThreat modelling

📌 Application Security Engineer (f/m/d) (Roma)
🏢 Awin
📍 Roma