Application Security Engineer

About the role

We are looking for an Application Security Engineer to join Big Stars in Belgrade. You will be responsible for embedding security into our cloud‑native products and ensuring a secure by design approach across the development lifecycle.

Key responsibilities

• Design security architecture for cloud infrastructure and applications, especially on AWS.
• Collaborate with product managers, architects and developers to implement security controls and platform ecosystem.
• Integrate and validate security tooling within CI/CD pipelines and infrastructure‑as‑code manifests.
• Define policies, controls and capabilities to protect products and environments.
• Build and automate declarative threat models.
• Participate in product planning cycles and engineering committees.
• Guide migration of services from data‑center to public cloud.
• Act as a trusted cyber‑security advisor for product and application teams.

Required profile

• Minimum 3 years experience as an Application Security Engineer.
• Proven experience integrating security scanning tools into development pipelines.
• Hands‑on experience securing micro‑services built with JavaScript/TypeScript.
• Familiarity with Agile methodologies and privacy regulations such as GDPR.
• Knowledge of industry standards (PCI, ISO 27001, NIST) is a plus.
• Relevant security certifications (CISSP, CISM, CCSK, CCSP, CEH) are highly desirable.

Required skills

• Python and shell scripting.
• JavaScript / TypeScript.
• AWS cloud services.
• Kubernetes and Docker.
• Istio service mesh.
• Terraform, Helm, CloudFormation.
• GitLab or Jenkins CI/CD pipelines.
• Threat modeling and security architecture.
• Supply‑chain security and secure software delivery.
• Agile methodologies.

What we offer

• 24 vacation days per year.
• 6 sick days without a medical certificate.
• Premium health insurance up to €5,000 annually.
• Birthday, wedding and newborn gifts.
• Learning & development budget for conferences, courses and certifications.
• International corporate events, team‑building activities and career growth opportunities.