Application Security Engineer

About the role

Veeam is the Data and AI Trust Company, specializing in helping organizations ensure their data and AI are fully understood, secured, and resilient to enable the acceleration of safe AI at scale. As the market leader in both data resilience and data security posture management, Veeam is built for the convergence of identity, data, security, and AI risk. Headquartered in Seattle with offices in more than 30 countries, Veeam protects over 550,000 customers worldwide, who trust Veeam to keep their businesses running. Join us as we go fearlessly forward together, growing, learning, and making a real impact for some of the world’s biggest brands.

About the Role

Join us as an Application Security Engineer and help shape the security of Veeam products, enhancing data protection and driving business resilience.

What You’ll Do

- Conduct regular security assessments, vulnerability scanning, and penetration testing of Veeam products and services

- Work with development teams to integrate secure development practices into the software development lifecycle

- Collaborate on the design and implementation of security within Veeam products

- Threat modelling and design reviews for new and existing Veeam products

- Conducting manual source code security audits

- Using automated application-analysis tools

What You’ll Bring

- Ability to read source code on programming languages (such as C/C++/C#/JavaScript)

- A good understanding of the principles of secure software development

- A desire to develop in the field of application security

- A lively and flexible mind, clear logic, and analytical skills

- The desire and ability to work as part of a team

- English proficiency for daily communication within international teams

Bonus Skills

- Knowledge of scripting languages (Python, PowerShell, Bash, Ruby, etc.)

- Knowledge of modern cryptographic algorithms

- Experience with DAST and SAST tools

- Skills using OWASP ZAP, Burp Suite, Kali Linux tools

- Certifications such as OSCP, CEH, CSSLP, CCSP, AWS Certified Security, etc.

- Familiarity with cloud platforms (such as AWS/Azure/GCP)

- Experience playing CTF

- Experience with HackTheBox

- Experience with bug bounty hunting

What You’ll Get

- 25 vacation days, 4 sick days, 21 paid medical leave days, plus 4 extra global VeeaMe Days for self-care and 24 paid volunteer hours annually through Veeam Cares

- Premium private medical insurance for employees and dependents

- Daily meal vouchers for restaurants and groceries (180 CZK per working day)

- Flexible cafeteria platform with thousands of lifestyle benefit options

- Multisport Card for gym and wellness, with family add-on options