Application Security Engineer - Senior
The full posting
We are looking for anApplication Security Engineerto join our Information Security team.
The Information Security team is responsible for protecting Plata’s products, systems, and data by embedding security throughout the technology lifecycle. We work closely with engineering teams to identify and mitigate security risks, strengthen application defenses, and ensure security is integrated into every stage of software development.
As an Application Security Engineer, you will serve as a key link between development and security teams, designing, implementing, and maintaining robust application security controls. You’ll help embed security across the entire software development lifecycle - from design and development to testing and deployment - while continuously improving our application security practices.
Challenges that await you
- Collaborate with Dev & Ops teams. Guide secure coding practices, participate in code reviews, and embed security seamlessly into the SDLC
- Conduct security reviews & threat modeling. Analyze application architecture, define threat models, and drive proactive risk identification
- Integrate security tools. Deploy and manage SAST, DAST, IAST, RASP, and SCA tools within CI/CD pipelines to automate early detection and remediation
- Handle security incidents
- Implement “shifting left” strategies, enforce continuous testing, fast remediation, and embed security culture across teams
- Educate and train. Conduct workshops to elevate developer security awareness and promote adherence to OWASP, ASVS, and secure design standards
What makes you a great fit
- Proficient in programming languages (web/mobile)
- Strong understanding of web architectures (microservices)
- Deep knowledge of OWASP Top 10, threat modeling, and security testing frameworks
- Familiarity with security tools such as ZAP, Dependency-Track, Burp
- Strong analytical skills with precise and thorough attention to detail
Your bonus skills
- Security certifications (OSCP, OSWE, GWAPT, GCPN)
- Contributions to or experience with bug bounty or ethical-hacking programs
- SaaS or cloud-native environments experience
- Familiarity with Kubernetes or container security
Our ways of working
- Innovative Spirit: A commitment to creativity and groundbreaking solutions
- Honest Feedback: valuing open, transparent communication
- Supportive Team: a strong, collaborative community
- Celebrating Achievements: recognizing our wins together
- High-Tech Environment : a team full of smart and revolutionary people who date to challenge the status quo of incumbent finances
Our benefits
- Relocation support to Kazakhstan, Spain, Cyprus, or Georgia with full visa & permit support to the employee and family
- Flexible work from one of our offices or remote
- Healthcare Coverage
- Education Budget: Language lessons, professional training and certifications
- Wellness Budget: Mental health and fitness activity reimbursements
- Vacation Policy: Annual leave and paid sick leave as per applicable policies
Where you can be based
This position is 100% remote and open to applicants anywhere in the world.
Text as Plata published it; last compared with the original on 13 Nov 2026.
The application
Your details and CV, then 4 questions.
- 1.TelegramShort answer
- 2.consent_file_versionShort answer · optional
- 3.consent_timestampShort answer · optional
- 4.Interview TranscriptsYes or no
Taken from Plata's application form as it stood on 13 Nov 2026.
The employer: Plata
Plata issues credit cards and banking products in Mexico; it is hiring four security specialists across Belgrade, Mexico and one worldwide remote post.
Pay and benefits: Salaried roles in Belgrade and Mexico, plus one worldwide remote engineering post.
Other security roles worth a look
A few links on CyberJobs.cc are referral links: when one leads to a hire, a sign-up or a purchase (a lab, a course or a tool marked Partner), the company behind it may pay CyberJobs.cc a fee. You pay nothing extra, and it never changes the salary an employer offers you or which roles the board lists. Roles from partners who pay us a fee rank a little higher in this list.
Application Security Engineer – CVE & Vulnerability Research (shows the role here)
Anyone AI · Offensive Security · Remote· 1mo agoDetails
$65/hr
Backend Security Engineer (shows the role here)
micro1 · Security Engineering · Remote· 1mo agoDetails
$30–$100/hr
Security Data Engineer (shows the role here)
Anthropic · Security Engineering · Remote-Friendly (Travel Required) | San Francisco, CA· 2w agoDetails
$320,000–$405,000/yr
Senior Security Engineer II (shows the role here)
Braze · Cloud Security · Toronto· 2mo agoDetails
CAD 153,000–240,500/yr
Let security teams come to you
Security teams sometimes ask us directly for someone with a given specialty, clearance or certification. Join the candidate pool once and we put you forward when a brief matches, and only after you say yes. No cost to you.
Hear first when Plata posts a security role
We read Plata's careers system around the clock and send its new security roles in a weekly email, along with comparable openings at other employers. Free; leave whenever you like.