Application Security Engineer, TripleTen

About the job

Description

Nebius Academy (powered by TripleTen ) provides assessments and training for tech companies and aspiring professionals worldwide, helping companies & individuals transform their lives through career development and acquiring the new skills needed as a tech professional.

Our focus on data science, machine learning, and generative AI helps tech-forward companies level up their employees' skills and drive innovation.

We are looking for an Application Security Engineer to own product security end to end — from threat modelling and secure design reviews to vulnerability management and security controls embedded into CI/CD.

You will work closely with product and platform teams to make security part of the engineering process, building secure defaults and helping prevent vulnerabilities from reaching production without slowing development down.

What you will do

Own application and product security end to end, from design reviews and threat modelling to vulnerability remediation and follow-up.

Partner with product and platform teams to embed security into the development lifecycle rather than treat it as a final review step.

Build and improve security controls in CI/CD, including SAST, dependency, secrets, container, and IaC scanning.

Review application designs and code where security risk is meaningful, and turn recurring findings into secure defaults, shared libraries, lint rules, and CI gates.

Drive vulnerability management across application code and cloud posture, including triage, risk-based prioritisation, remediation timelines, and external pentest findings.

Strengthen security in multitenant B2B systems, including tenant isolation, authentication, authorization, RBAC / ABAC, and access controls.

Work on cloud and Kubernetes security across AWS environments, including IAM, secrets management, network boundaries, and workload hardening.

How can we help?

How can we help?

Application Security Engineer

About the job