Application Security Engineer

About this role

Join our Movement and Champion Restaurant Culture! 💚 At TheFork we believe that the best things in life happen around the table. As the leading restaurant booking platform in Europe, we connect the broadest community of loyal diners with the world’s favorite restaurants. Powered by innovation and a deep passion for the restaurant industry, we create unique dining experiences across 11 countries. We’re part of the Tripadvisor Group and proud to be building a diverse, people-first culture where “respect”, “ownership”, “growth” and “better together” values thrive.

If you’re passionate about food, technology, and making a real impact, your seat at the table is ready. 👉 Discover life at TheFork This position offers a gross TTC annual salary range of 67 000€ and 73 000€, in line with the collective bargaining agreement and the company compensation philosophy. The final offer will reflect the candidate’s experience, qualifications and the specific responsibilities of the role. What you will do: Are you passionate about securing the application development pipelines and ensuring the security of web applications? Are you looking to thrive in a fast-paced environment? If so, TheFork is looking to hire an Application Security Engineer for our ever-growing security team.

In this role, you will evaluate the security posture of TheFork’s applications and systems. Main activities: Scanning TheFork web applications looking for vulnerabilities and ensuring they get fixed Working knowledge of any object-oriented programming language (eg. Node / Typescript) Strong IaaS security skills, with a focus on cloud technologies like AWS. Researching new security threats, vulnerabilities, and exploit techniques Responding to new security threats and helping implement new requirements Provides technical guidance and oversight when working with developers Work in a team environment while maintaining the confidentiality of investigation information Strong knowledge of working with OWASP concepts for various solutions Who you are: Bachelor's Degree, preferably in a technical field i.e.

Information Systems or Computer Science. Security certifications are desired but not required (CISSP, GIAC, CEH, Security+, CSSLP). At least 4+ years of demonstrated manual security testing You must have a solid understanding of security protocols, cryptography, authentication, authorization, and general application security requirements Experience implementing and operating security technologies and processes in a hybrid cloud environment, such as AWS.