Application Security Engineer

Swapcard

Application Security Engineer managing Bug Bounty programs for AI-powered event platform Swapcard. Collaborating with developers to remediate security vulnerabilities and ensure secure development practices.

Posted 5/25/2026full-timeRemote • 🇵🇹 PortugalMid-LevelSeniorWebsite

About the role

Key responsibilities & impact

Own and manage our Bug Bounty programs: triage reports, validate findings, and reproduce PoCs.
Collaborate with developers and product owners to propose and support remediation of security issues.
Write or review pull requests to fix security vulnerabilities directly in the codebase.
Validate results from external pentests and integrate them into the development backlog.
Contribute to threat modeling, code review, and security design discussions.
Support the Secure Development Lifecycle (SAST, dependency scanning, security automation in CI/CD).
Perform lightweight pentesting of new features and releases when needed.
Maintain clear documentation to support AppSec processes.
Coordinate security communication between Security, Developers, and Product for faster resolution of security tickets.

Requirements

What you’ll need

Previous experience as a developer (any modern backend/frontend stack).
Hands-on security experience through bug bounty programs, CTFs, or pentesting, and respective tools (eg. Burp Suite).
Solid understanding of common application vulnerabilities (OWASP Top 10, SSRF, IDOR, etc.).
Familiarity with SAST/DAST tools (e.g. SonarQube, Snyk).
Experience collaborating with developers and product teams.
Strong problem-solving and communication skills with a “find and fix” mindset.

Benefits

Comp & perks

International team with 40+ nationalities (more on the way!) 🌍
Remote-first policy with headquarters in Paris 🗼
Thriving startup with career growth opportunities 🪴
Open-minded culture that appreciates differences 👽
Feedback-driven, supportive & curious team with a DIY mindset 🤔 🛠
Generous Paid Time Off to ensure you have time for what matters most ❤️🏡
Remote perks designed to optimize your working experience 🎁
In-person social gatherings to celebrate our achievements 🏝️
100% of your health insurance contribution paid by Swapcard 🏥
Work-from-home budget (one-off contribution for equipment in addition to your initial equipment setup) 🖇️
Co-working space budget to support remote work in professional environments 💼
Learning budget to help you develop new and existing skills 🤓
Mental health care initiatives to support your well-being 🧘

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

bug bountypentestingSASTDASTsecurity automationthreat modelingcode reviewsecurity designapplication vulnerabilitiesproblem-solving

Soft Skills

communicationcollaborationorganizationalfind and fix mindset