2023-08-23 14:48:55

Application Security Lead

CVKeskus.ee klient

Job Description

Wolt is looking to expand it's Security team, and we're hiring an Application Security Lead to build an even more secure Wolt. This role, in addition to a few new hires and our existing Security Lead, will form a Security team answering to all the security needs of Wolt. The team is based in Helsinki HQ (working remotely at the moment) but welcomes a new member to the Helsinki HQ or working entirely remotely elsewhere in Finland, Germany, Denmark, or Estonia now and in the future! ????

You'll be working on the application security of all of our live products. We provide products for a multitude of user groups, the largest ones being consumers, merchants and courier partners. We already have more than 20 engineering teams working across all product needs of Wolt, and you'll be involved in helping them to make all our products more secure. 

As an Application Security Lead you will define application security guidelines and standards for developer teams, and embed those standards within the development lifecycle (SSDLC). You will provide application security training for developers, oversee and develop Wolt’s existing bug bounty program. You will shift Wolt’s application security practices as much left as possible by integrating security tooling within our CI/CD pipelines and loop-in the developers automatically and directly where needed. Through a mixture of architectural and code reviews, pentesting assessments, and discussions with developers, you will identify and propose remediation for application security vulnerabilities or design deficiencies.You will be responsible for standardising Wolt’s PSIRT practices at Level 2, preparing and delivering meaningful AppSec metrics to Wolt’s Security Council.

Requirements

Our humble expectations

To be successful in this role you should have at least 5 years of experience in application security, software development background and a solid track record of building and owning application security programmes and practices in fast-growing tech companies. Ideally you have been successfully hiring, leading and growing excellent AppSec engineers and you are an automation enthusiast-we believe that any solution that doesn’t take automation into account is an incomplete solution. You should be able to walk in developers' shoes to ensure the solutions you and your team provide are pleasant and easy to use.

We are looking for someone who follows and studies the silent signals-we at Wolt are open to trying different solutions before they become hype and industry requirements. 

Company offers

The compensation will be a negotiable combination of monthly pay and Wolt stock options. The latter make it exceptionally easy to be excited about our company growing and doing well, as you'll own a piece of the pie.

If you want to check up on your application or have any further questions about the position you can turn to Product Talent Acquisition Partner, Anna Barasinska, at anna.barasinska(at)wolt.com at any given time.