Senior Information Security Engineer – Application Security

About the role

Camunda is looking for a Senior Information Security Engineer specializing in Application Security. In this fully remote position you will join a small, senior InfoSec team and work closely with product and engineering groups to embed security throughout the software development lifecycle.

Key responsibilities

• Partner with engineering teams from design to deployment to ensure security‑by‑design for Java‑based services.
• Lead the implementation, tuning and integration of SAST, DAST, SCA and container/image scanning tools into CI/CD pipelines.
• Manage application and supply‑chain vulnerability programs, triage findings and coordinate remediation.
• Conduct secure design reviews, threat modeling and architecture assessments for API‑driven microservices.
• Support and coordinate application‑layer security incidents and escalations.

Required profile

• Several years of hands‑on experience securing SaaS applications and microservice architectures.
• Deep understanding of secure coding practices for Java and modern CI/CD environments.
• Proven ability to work collaboratively with developers and influence security decisions.

Required skills

• Java
• SAST
• DAST
• SCA
• CI/CD pipelines
• Container and image scanning
• API security
• Threat modeling
• Vulnerability management
• Secure design and architecture reviews

What we offer

• Fully remote work with flexible hours aligned to CET‑Eastern Time.
• Opportunity to shape security practices in a fast‑growing AI‑first organization.
• Collaborative culture built on the FAITH values.