Application Security Engineer

Evolvice is a German nearshore service provider with branches in Ukraine, Portugal and Egypt. Founded in 2012, Evolvice has a strong technical background and business domain knowledge, combining software engineering and Agile methodology, leading its’ clients path to digital transformation. Headquartered in the heart of the automobile industry, Stuttgart (Germany), our expertise stretches from automotive, healthcare, travel, financial, governmental, and insurance to manufacturing industries.

Our team is over 100 people including web (C#/.NET, Java, JS) & mobile (iOS/Android/Ionic) developers together with business analysts, project managers, QA, and support staff.
Our corporate culture is characterized by agile processes, autonomous teams without hierarchies, as well as openness and transparency – both internally and with our clients.

Currently, we are searching Application Security Engineer to join the big team of professionals for long-term cooperation.

Customer is a fully licensed Swiss bank under the regulation of the FINMA. The trading platforms give you access to invest in global financial markets.

Requirements:

• Familiarity with Flutter and Dart is highly desirable
• Proven experience in application security, particularly within the banking or financial services industry.
• Strong understanding of web and mobile application security principles, including OAuth, JWTs, and Auth0.
• Experience with CI/CD tools and practices, specifically within GitHub environments, and understanding of how to manage secrets securely.
• Knowledge of secure cache storage mechanisms on mobile devices.
• Ability to conduct comprehensive security assessments and penetration testing.
• Excellent problem-solving skills and attention to detail.

Strong communication and collaboration skills.

• Bachelors degree in Computer Science, Information Security, or a related field.
• Relevant security certifications (e.g., CISSP, CEH, OSCP) are advantageous.

• Implement and maintain security measures to protect web and mobile applications.
• Understand and apply Auth0 for authentication and authorization purposes.
• Provide training and guidance to the development team on security best practices.
• Design and implement strategies for secure cache storage on mobile devices.
• Conduct penetration tests and security audits to identify vulnerabilities in existing applications if needed.
• Collaborate with the development team to ensure secure coding practices are followed.
• Stay updated with the latest security threats and countermeasures.
• Contribute to the development of security policies and procedures.

We offer:

• Financial stability, The account is on support.
• Interesting and challenging projects within professional self-managed teams.
• Friendly team and a comfortable working environment.
• Flexible schedule (8 —11 AM start) with a possibility to work assigned hours and/or adjust work schedule as requested by the manager.