Application Security Engineer - Remote Eligible

Application Security Engineer

We're on a mission to make banking 10x better. At 10x Banking ("ten ex banking") we're transforming the financial industry with our cloud-native core banking platform. Our talented team has built the world's first 'meta core' - a new category in core banking technology. 10x's platform powers global banks and financial institutions including Chase UK, Old Mutual and Westpac.

We offer a diverse, global community that thrives on innovation and collaboration. Tackling exciting challenges with the utmost integrity, we aim to make a positive impact through our work for our clients, their customers and the communities we work in.

Be part of something bigger – join us and transform and industry.

About the role...

We are looking for a skilled and security-minded Application Security Engineer to join our cybersecurity team in a fast-paced fintech environment. This role focuses on integrating security into the software development lifecycle, managing application-level vulnerabilities, and supporting secure development practices across teams.

You will work closely with developers, DevOps, and product teams to ensure that security is embedded into every stage of the development process. While hands-on development of CI/CD pipelines is not required, familiarity with tools like Jenkins and Groovy will be beneficial.

Please note: this role is fully remote, but this employee must reside in Hungary for the duration of employment. What you will do...

1. Operate and maintain application security tooling, including SAST and SCA platforms (e.g., Checkmarx, Snyk).
2. Analyze and triage vulnerabilities, raise remediation tickets, and collaborate with engineering teams to drive resolution.
3. Provide guidance on secure coding practices and support developers in remediating security issues.
4. Automate elements of security assessments and reporting using scripting (preferably Python).
5. Contribute to the integration of security tools into CI/CD pipelines (e.g., Jenkins), working with DevOps teams.
6. Track and report on vulnerability trends, providing insights to reduce risk exposure.
7. Support threat modelling and security reviews of new features and services.
8. Maintain documentation and knowledge sharing via Confluence.
9. Building vulnerability reports for various contexts and clients from source data.