Application Security Engineer

📋 Description

• Conduct threat modelling reviews of TDDs for new and existing features.
• Perform and support application security assessments, including pen tests and PoC.
• Investigate, triage, and respond to Bug Bounty submissions, validating findings and remediation.
• Own and improve application-layer protections, including Cloudflare WAF tuning.
• Partner with engineering teams to embed security in the SDLC from design to deployment.
• Research emerging threats and translate findings into practical mitigations for our stack.

🎯 Requirements

• Experience across web/mobile, infrastructure and cloud security.
• Hands-on white-box web/mobile pentesting.
• Ability to read code to find security issues; focus on JavaScript/TypeScript.
• Strong Threat Modelling understanding and SDLC application.
• Experience with web app firewalls (WAF) to protect apps and tune rules.
• Embed security in CI/CD pipelines; collaborate with engineers.

🎁 Benefits

• Unlimited holidays: We give you autonomy to choose when to work.
• Hybrid working: work remotely or at a Moonbase.
• Private Healthcare benefits: To protect you and your loved ones
• Enhanced parental leave: Spend more time with your loved ones
• Annual training budget: We support your training journey every step of the way
• Home office setup allowance: Create the home office of your dreams