We use technical cookies and Zorky's de-identified visit log. Yandex Metrica (data is stored on servers in Russia) runs only with your consent. We never sell data. More about cookies and statistics.
Zorky is in test mode — everything is free. Jobs and company pages are open to everyone; links to postings and your personal feed open after you sign up. Sign up →
← All jobs

Application Security & Vulnerability Validation Engineer

Seniorremote2,000 USD · period not specifiedWarsaw, PLtoday
Stack
Application SecuritySecure Code ReviewVulnerability Assessmentthreat modelingSASTDASTPatch ValidationPoC developmentagileawsazurec++
Details
Employment
Contract
Experience
5+ years
Practices
Agile
Show company and link
Free, after you sign in.
Apply
Upload your CV — employers and recruiters from different countries looking for your profile can contact you directly.
Send your CV →
Description

We are seeking a seasoned Application Security & Vulnerability Validation Engineer to serve as the operational and technical bridge between automated/AI-driven security scanning and remediation systems and product engineering teams. In this role, you will streamline service threat modeling, eliminate scanner triage noise, build minimal proofs-of-concept (PoCs) to validate exploitability, perform rigorous quality assurance on AI/agent-generated security patches, and partner with software engineers to drive confirmed vulnerabilities to verified production closure.

Responsibilities

Construct minimal local test environments, dependency mocks, and reproduction harnesses to validate reported security findings Distinguish true, exploitable vulnerabilities from scanner false positives and attach clear, reproducible evidence to issue tickets Supervise, review, and validate code patches generated by automated and AI/agentic remediation systems before they are routed to product code owners Inspect code diffs for logic flaws, hallucinations, off-by-one errors, memory safety issues, and unintended functional regressions Execute unit, integration, and differential tests to confirm both fix efficacy and build stability (targeting a ≥90% patch acceptance rate by code owners without major revision) Review, filter, and prioritize incoming findings from automated static (SAST) and dynamic/endpoint scanning tools within a 24–48 hour turnaround window Classify vulnerability severity using standar

Full description, company and the link to apply — after you sign in. Sign in
Employer contacts (email/phone/telegram) are hidden from the public preview. Send your CV so employers can reach you directly.
Report this job
Urgent question? Message @termdocs