Senior Information Security Engineer - Application Security

About the role

Camunda is looking for a Senior Information Security Engineer specializing in Application Security to join its global, fully‑remote InfoSec team. You will work closely with product and engineering groups across the software development lifecycle to embed security by design into a modern SaaS platform.

Key responsibilities

• Partner with engineering teams from design through deployment to ensure security is built in.
• Lead the evolution of AppSec tooling by integrating SAST, DAST, SCA and container/image scanning into CI/CD pipelines.
• Manage vulnerability triage, prioritisation and remediation across applications and supply chain.
• Conduct secure design reviews, threat modelling and architecture assessments for API‑driven micro‑services.
• Support and coordinate application‑layer security incidents and escalations.

Required profile

• Senior‑level professional with strong hands‑on experience in application security.
• Proven ability to work collaboratively with developers in a fast‑moving SaaS environment.
• Comfortable operating in a fully remote, globally distributed team.

Required skills

• Java development
• Static Application Security Testing (SAST)
• Dynamic Application Security Testing (DAST)
• Software Composition Analysis (SCA)
• Container and image scanning
• CI/CD pipeline integration
• Vulnerability management
• Secure design and threat modelling
• API and micro‑services security

What we offer

• Fully remote work with flexible hours aligned to CET‑Eastern Time.
• Opportunity to shape security practices in a fast‑growing AI‑first organisation.
• Collaborative culture built on the FAITH values.