Application Security Engineer

Web Application Security Engineer – Contract

📍 Bucharest – Hybrid working

📅 Initial 12-month contract

💶 €30–€33 per hour, depending on experience

💼 B2B freelance engagement – PFA or SRL required

🚀 ASAP start

We’re supporting a global technology organisation looking to appoint a Web Application Security Engineer for an initial 12-month contract, with strong potential to extend.

This is a hands-on position within a global cybersecurity team, focused on identifying vulnerabilities across web applications and working with development teams to ensure security issues are properly understood, remediated and closed.

🔐 The Role

• Perform web application security scans using tools such as Tenable Web App Scanning and Burp Suite
• Review scan results, validate findings and identify potential false positives
• Clearly explain vulnerabilities and recommended actions to development teams
• Coordinate remediation activity and track security issues through to closure
• Retest applications to confirm vulnerabilities have been resolved
• Support scan scheduling, reporting and security metrics
• Help improve the wider web vulnerability management programme

👤 What We’re Looking For

• Demonstrable experience in web application security, application security or vulnerability management
• Hands-on experience using DAST or web application scanning tools
• Good working knowledge of Burp Suite Professional or Enterprise
• Experience with Tenable Web App Scanning would be particularly valuable
• Strong understanding of common web vulnerabilities and application security risks
• Experience working with developers to support vulnerability remediation
• Knowledge of protocols such as HTTP, TLS, DNS and SSH
• Strong communication skills and the ability to explain technical issues clearly
• Able to manage multiple priorities and work independently within an international team

Experience with PKI, certificate management and wider vulnerability management processes would be beneficial.

If you have a background in web application security, hands-on DAST experience and enjoy working with development teams to see vulnerabilities through from identification to resolution, we’d be keen to hear from you.

Apply now to find out more.