Senior Cloud Application Security Engineer
Role Overview
Strengthen application and API security across the production estate.
Investigate monitoring and assessment findings and coordinate remediation with CloudOps and development teams as part of the existing security team.
Key Skills for This Role
Full Job Posting
About this role
Strengthen application and API security across the production estate.
Investigate monitoring and assessment findings and coordinate remediation with CloudOps and development teams as part of the existing security team.
Responsibilities
- Provide production-focused security oversight for applications, APIs, and microservices; review Defender for Cloud and Sentinel alerts and findings.
- Operate and improve continuous vulnerability assessment and VAPT, including an AI-enabled security-validation platform when selected.
- Correlate security findings and telemetry across Defender for Cloud, Sentinel, Azure Front Door/WAF, API Management, AKS, OpenTelemetry, Azure Monitor, and Grafana.
- Investigate suspicious activity and potential attack paths; assess exposure, exploitability, and business risk.
- Support application/API threat modeling, design reviews, and secure development, including assessment of authentication, authorization, access controls, secrets, dependencies, containers, and supply-chain risks.
- Validate findings, filter false positives, prioritize remediation, coordinate fixes, and retest through closure.
- Tune assessment and detection configurations; support incident investigations, evidence collection, post-incident reviews, and security reporting.
Qualifications and experience
- At least 5 years of relevant application security, cloud security, vulnerability management, or security engineering experience, with senior-level ownership of investigations or remediation.
- Hands-on application/API security testing, vulnerability triage, and remediation validation experience.
- Practical Azure security knowledge, especially Defender for Cloud and Sentinel.
- Familiarity with KQL, Azure Monitor, Log Analytics, and OpenTelemetry is advantageous.
- Understanding of web/API risks, secure development, authentication, authorization, access control, containers, AKS/Kubernetes, and software supply chains.
- Experience with DAST, API scanning, vulnerability assessment, or continuous VAPT.
- Experience with .NET, ASP.NET (MVC, Web API), Web Services, and SQL databases.
- Clear English communication; investigative, evidence-led, collaborative, and pragmatic approach to risk and remediation.
- Production systems must be tested only within approved scope and change controls.
Location
- The posting lists Dubai, Bucharest, and Sarajevo as remote locations and also states work from an office in Bucharest, Dubai, or Sarajevo.
What the company offers
- International, fast-paced environment with quick decisions, ownership, and opportunities to influence decisions and ways of working.
- Support for continuous learning and professional development, with a values-driven collaborative culture.
About additiv
Swiss-based fintech and part of Temenos, partnering with companies to accelerate financial innovation.
Its cloud-native, API-first, AI-embedded financial services orchestration platform connects core systems with third-party providers and ecosystem partners.
The company states that more than 400 institutions use its platform.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career