AI-first Application Security Engineer

We are looking for an Application Security Engineer who uses AI-assisted tooling to build security into the software development lifecycle (SDLC) and reduce the number of vulnerabilities deployed to production. You will use AI to speed up security analysis, automate feedback loops, and scale secure engineering practices across teams, while applying human judgment to validate findings, make risk decisions, and guide engineers.

_This position offers hybrid setup with the flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas._

• Secure all steps of the software development lifecycle holistically, using AI-assisted analysis to identify risks early
• Define secure coding guidelines as part of security requirements, and implement them in CI/CD pipelines with AI-supported checks where appropriate
• Provide fast feedback to developers by running automated security checks in CI/CD, with AI helping to triage, prioritize, and explain results
• Apply practical knowledge of security tools for automated software testing (SAST, DAST, SCA, secrets detection) within CI/CD pipelines
• Professionally secure the software delivery process, from build to deployment
• Conduct secure coding awareness training and share best practices, including how to use AI coding assistants safely and securely
• Maintain a strong understanding of programming languages (Java, Swift) to review code and provide actionable guidance
• Communicate effectively with engineers to promote "security by design"
• Align with engineering leadership to prioritize and streamline security fixes, making remediation a positive experience for software engineers
• Monitor and report potential vulnerabilities, using AI to deduplicate and enrich findings and automatically create tickets
• Drive remediation within engineering teams and track progress to closure
• Develop threat models and attack trees for in-scope applications, using AI to accelerate drafting while validating outputs with domain expertise
• Set up and coordinate penetration tests across web and mobile (Android/iOS) applications, and track findings for remediation
• Support attack modeling and red teaming exercises
• Assist the Information Security Officer (ISO) in ensuring compliance with standards such as ISO 27001, TISAX, and GDPR

• 3+ years of experience in application security or similar security roles
• Practical knowledge of application security tooling for automated testing in CI/CD
• Strong understanding of Java and Swift
• Experience with threat modeling and attack trees
• Familiarity with web and mobile application security testing
• Practical experience using AI tools to support security engineering tasks, with awareness of their limitations and risks
• Strong communication skills and the ability to work with engineering leadership and development teams
• Excellent command of written and spoken English (B2+ level)

• Engineering Heritage: Best-in-class experts sharing a culture of engineering excellence and tackling complex engineering challenges for over 30 years
• Advanced Tech Stack: Innovative projects where you can apply or enhance your expertise in Cloud, Data, AI, and other emerging technologies
• World-Class Clients: Work closely with 340+ of the Forbes Global 2000 on creating disruptive solutions that make a global impact
• Professional Growth: Exceptional support for career development with comprehensive resources for upskilling or reskilling in pioneering practices
• GenAI Community: Strong AI competencies with 600+ experts across 55+ locations driving GenAI-enabled transformation journeys
• Entrepreneurial Culture: If you're passionate and dedicated to improving business transformation, we provide the support you need to bring your ideas to life
• Hybrid Setup: The flexibility to work from any location in Lithuania, whether it's your home or our dynamic offices in Vilnius and Kaunas
• Other Benefits: Additional vacation and trust days, private health insurance, Employee Stock Purchase Plan and more