Application Security Engineer

About the role

Luciq is looking for an Application Security Engineer to help shape and expand its application security program. You will work closely with product and development teams throughout the software development lifecycle, ensuring security is built‑in rather than added after the fact.

Key responsibilities

• Lead threat‑modeling sessions and provide hands‑on fixes during feature design.
• Conduct security code and architecture reviews for Ruby on Rails, Go, and Python services.
• Validate, triage, and drive remediation of vulnerabilities across the full lifecycle.
• Build and maintain automated security testing in CI/CD pipelines (SAST, SCA, secret scanning) and integrate findings into developer workflows.
• Support cloud security reviews, including IAM policies, network segmentation, container/Kubernetes configurations, and Terraform policy‑as‑code.
• Operate AWS security services (SecurityHub, Inspector, GuardDuty, CloudTrail, CloudFront) to maintain visibility and detection.

Required profile

• Hands‑on experience reviewing code and designs in Ruby, Go, or Python.
• Strong understanding of secure software development practices and threat modeling.
• Ability to work across teams, including product, engineering, platform, and security.
• Willingness to engage in incident triage, customer security questionnaires, and compliance reviews.

Required skills

• Ruby on Rails
• Go
• Python
• AWS (SecurityHub, Inspector, GuardDuty, CloudTrail, CloudFront)
• Terraform
• Jenkins CI/CD
• SAST, SCA, secret scanning tools
• Kubernetes and container security

What we offer

• Opportunity to shape a growing security program.
• Exposure to a broad range of security domains beyond pure AppSec.
• Clear career path from mid‑level to senior leadership.