Senior Application Security Engineer @ Jamf

What you’ll do at Jamf:

At Jamf, we empower people to be their best selves and do their best work. Senior Application Security Engineer is a technical leader responsible for designing and overseeing controls that validate and improve the security of Jamf’s products and services. This role leads secure design and architecture work, drives secure development lifecycle practices, discovers and addresses complex security issues, builds and scales security automation, and takes decisive action to mitigate emerging threats while mentoring less experienced team members.

This role is offered as hybrid with the expectation to be in Katowice office once per 2 weeks . We are only able to accept applications for those based in Poland and have sponsorship to live and work in Poland .

• Minimum 6 years of experience in software development and application security (Required).
• Minimum 5 years of experience in software and development security principles and controls (Required).
• Minimum 2 years of experience in one or more programming languages (Required).
• Minimum 2 years of experience in security assessment tools and techniques, particularly in software development processes (Required).
• Familiarity with OWASP and/or other relevant security frameworks (Required).
• Minimum 2 years of experience with Apple device management (Preferred).
• Ability to lead through influence in software development.
• Strong Communication Skills.
• Excellent Organizational Skills.
• Proven Analytical Skills.
• Ability to communicate complex technical terms in an easy to understand, non-technical manner.
• Ability to interact effectively with co-workers in a results driven culture.
• Self-starter, energetic multi-tasker, highly motivated and team player.
• Effective and efficient project planning and time management skills.
• Ability to critically analyze issues and use good judgement to make decisions.
• Trustworthy with sensitive information and access to systems containing sensitive data.
• Performs all job responsibilities in alignment with the core values, mission and purpose of the organization.
• Adheres to the highest moral, ethical and legal standards to deliver an environment that promotes respect, innovation and creativity.
• Supports and promotes a positive, inclusive workplace one in which the talents and strengths of our increasingly diverse workforce are welcomed, further developed and manifested in our work.
• Bachelor's Degree in Computer Science, Information Systems, Computer Engineering, or related field (Required).
• A combination of relevant experience and education may be considered.
Preferred Certifications/Licensures:
• GIAC Security Essentials.
• CEH (Certified Ethical Hacker).
• CISSP Certified Information Systems Security Professional.
• AWS Certified Security.

What you’ll do at Jamf:

At Jamf, we empower people to be their best selves and do their best work. Senior Application Security Engineer is a technical leader responsible for designing and overseeing controls that validate and improve the security of Jamf’s products and services. This role leads secure design and architecture work, drives secure development lifecycle practices, discovers and addresses complex security issues, builds and scales security automation, and takes decisive action to mitigate emerging threats while mentoring less experienced team members.

This role is offered as hybrid with the expectation to be in Katowice office once per 2 weeks . We are only able to accept applications for those based in Poland and have sponsorship to live and work in Poland .

,[Lead security reviews of current and new products and services to identify, prioritize, and communicate security issues and risks., Champion and continuously improve secure development lifecycle practices (including threat modeling and testing), and guide teams in applying them effectively., Define and provide secure designs, requirements, and reference architectures, and review implementations for alignment with these standards., Collaborate with development, product, and infrastructure teams to investigate, troubleshoot, and drive the resolution of complex security issues as a senior technical escalation point., Design, develop, and roll out secure practices, processes, new tools and systems that scale product security across the organization., Own and maintain high-quality security documentation and reporting, ensuring it is actionable for both technical and non-technical audiences., Proactively research emerging threats, risks, and attack vectors relevant to Jamf infrastructure and software and translate them into concrete improvements to products, architecture, and processes., Participate in and help coordinate security incident response activities as needed, including post-incident reviews and long-term remediation planning., Independently automate routine tasks and scale application security processes and systems, mentoring others on how to use and extend these automations., Serve as a product security subject-matter expert, providing counsel, direction, and decision support to teams throughout the organization., Mentor and coach Product Security Engineer I and II team members, supporting their growth in technical skills, ownership, and impact., Lead Product Security Champions guild to mentor developers in the product security practices., Other duties and special projects as assigned.]
Requirements: SDLC, Application security, Security principles and controls, OWASP, Security assessment, Apple device management, GIAC, CEH, CISSP, AWS Cerified Security
Tools: Jira, Agile, Kanban.
Additionally: International projects, Small teams, Apple equipment, Training budget, Private healthcare, Flat structure, Free coffee, Bike parking, Playroom, Shower, Free snacks, Modern office, No dress code, Kuchnia.