Application Security Engineer

About the role

CCBill is looking for an Application Security Engineer to strengthen the security of its internally developed applications. You will work remotely from Serbia, collaborating with development, architecture and information security teams to embed security throughout the software development lifecycle.

Key responsibilities

• Perform manual and automated security assessments of web applications and APIs, including penetration testing and vulnerability validation.
• Conduct threat‑modeling, security design reviews and source‑code reviews to identify and remediate security flaws.
• Integrate security testing tools (SAST, DAST, SCA, secrets detection) into CI/CD pipelines using Jenkins, GitLab and Bitbucket.
• Track, prioritize and manage vulnerabilities, working closely with developers to ensure timely remediation.
• Collaborate with architecture, infrastructure and InfoSec teams to improve overall application security posture.

Required profile

• Minimum 3 years of experience in application security, penetration testing or related information‑security roles.
• Strong analytical, problem‑solving and communication skills, with the ability to work cross‑functionally.
• Proactive mindset, willing to mentor and promote secure coding practices across teams.

Required skills

• Deep knowledge of OWASP Top 10, CWE and NIST security guidance.
• Experience with security tools such as Burp Suite, OWASP ZAP, Nessus, Metasploit, Wireshark, and various SAST/DAST solutions.
• Familiarity with programming languages: Java.NET/C#, Python, JavaScript, Perl.
• Understanding of authentication, authorization and session management concepts.
• Hands‑on experience with CI/CD platforms: Jenkins, GitLab, Bitbucket.