Flexible work model
Work from home, from the office, or in a hybrid format that supports focus and collaboration.
About the role
In this role you will strengthen the organization's security posture by supporting and developing solutions in close collaboration with multiple development teams. You will guide the SSDLC process on the client's side, working with development teams across all SSDLC stages — especially the vulnerability management process (remediation recommendations and re-testing) — and support solution design changes from a security perspective. A development background in Java is required, with proficiency in C# (.NET), Go, or Perl considered a plus.
Responsibilities
- Lead and grow the SSDLC together with the development team
- Review code and lead the vulnerability management process
- Assess client security maturity and define improvement roadmaps at a strategic level
- Own the technical direction for embedding security into CI/CD pipelines and engineering workflows across multiple projects
- Guide clients in adopting a risk-based vulnerability management process
- Lead threat modeling and secure architecture workshops
- Define secure development standards and guardrails across projects and teams
- Drive developer security adoption and awareness at scale
- Act as a trusted advisor and thought leader in security transformation initiatives
- Lead negotiations with clients to understand business and technical requirements
- Mentor development team members and support the bug discovery and fixing process
Requirements
- 5+ years of experience as an Application Security Engineer in SSDLC and application security assessment, including hands-on experience implementing Secure SDLC practices and leading or mentoring development teams within a product development environment
- Advanced skills in threat modeling, secure architecture reviews, and design-level security validation
- Hands-on experience with SAST and DAST tools and their integration into CI/CD pipelines
- Fluency in modern cloud-native stacks (microservices, APIs, containers, Kubernetes, public cloud platforms)
- Comfortable reviewing source code in at least one of: Java, .NET (C#), GoLang, Perl
- Strategic mindset in aligning security architecture and initiatives with business priorities, delivery timelines, compliance requirements, and risk management strategy
- Proven experience leading teams, mentoring engineers, and managing practice-level priorities and growth
- Strong influence in leading discussions with engineering managers, architects, and security leadership
- Fluent in spoken and written English
- OSCP, OSWE, OSEP, OSCE, CREST, eCPPT, eCPTX, eWPT, or eWPTX certification (nice to have)
SoftServe is an equal opportunity employer. Qualified applicants will receive consideration regardless of race, color, ancestry, ethnicity, national origin, religion, sex, sexual orientation, gender identity or expression, age, citizenship, disability, health condition, marital or family status, veteran status, or any other characteristic protected by applicable law.
Role Summary
Location
Poland
Work type
Remote/Office
Direction
Engineering & Technology
Subdirection
Cybersecurity
Tech level
Senior
Apply Now
Fill out the form, and we'll be in touch shortly.
About us
We are a digital engineering and technology consulting company where expertise grows alongside people. For more than 30 years, we have been elevating technology: helping organizations navigate complex business challenges by combining deep engineering knowledge with thoughtful, research-backed innovation. Our teams work across key areas: digital engineering, data and analytics, Сloud, and AI/ML. In each, we deliver practical, scalable solutions rooted in real business needs and measurable human impact.
You bring your perspective and ambition. We create an environment where your work meets clarity, confidence, and purpose.
We offer
Compensation & Benefits
Competitive, market-based pay, benchmarked by role and location — plus health coverage, paid time off, wellness support, and learning opportunities.
People-first Leadership
Approachable leaders who communicate openly, keep teams close to the strategy, and support long-term planning.
Advanced tech communities
Stay close to AI/ML, Cloud, Quantum Computing, IoT, and Robotics communities, with projects built on modern frameworks.