Application Security Engineer

About the role

Everstar is recruiting an Application Security Engineer to support a milltech company developing products for the Defense Forces of Ukraine. This role sits at the intersection of engineering, AI, and compliance, requiring a specialist to secure production environments and integrate security into the development lifecycle.

Key facts

What you'll do

• Evaluate the security of new features and tools across network, infrastructure, and application layers, providing official approval before production deployment.
• Investigate AI-specific security risks and integrate findings into corporate frameworks based on ISO 27001:2022.
• Lead the implementation of ISO 27001:2022 standards within the organization.
• Perform audits of network perimeters, NGFW rules, network segmentation, and configurations for servers, Docker containers, and cloud services.
• Apply DevSecOps principles and enforce least privilege access.

Requirements

• Practical experience in web security architecture, including OWASP Top 10, security headers, WAF, and API protection.
• Hands-on experience with SAST/DAST tools and integrating security gates into CI/CD pipelines.
• Knowledge of AI and LLM attack vectors such as prompt injection, jailbreak, data leakage, and model inversion, including familiarity with OWASP LLM Top 10.
• Experience with ISO/IEC 27001:2022 implementation, maintenance, or auditing, including drafting security policies.
• Ability to explain complex security requirements to non-technical stakeholders and balance security needs with business objectives.
• Proactive approach to identifying and resolving technological risks rather than just reporting them.

Skills & tools

• AWS, Google Cloud, Azure
• Docker
• ISO/IEC 27001:2022
• SAST/DAST
• DevSecOps
• OWASP Top 10 / OWASP LLM Top 10

Practical notes

• Official employment contract provided.
• Includes 24 calendar days of annual leave plus one additional day for birthdays.
• Medical insurance is provided after the successful completion of the probation period.
• Military reservation is available for eligible candidates with valid military registration documents.