AppSec Jobs

Which levels are hiring

• Junior 3% · 16
• Middle 6% · 34
• Senior 56% · 305
• Lead+ 35% · 187

Few Junior roles — 3%; the usual way in is an adjacent role

Of 542 postings that name a level, Junior — 3%, Middle — 6%, Senior — 56%, Lead+ — 35%.

What postings ask for

• ○ Python22%
• ○ AWS18%
• ○ Kubernetes14%
• ○ DevSecOps12%
• ○ Java11%
• ○ LLM11%
• ○ JavaScript9%
• ○ GCP9%

✔ — in 25%+ of postings, ○ — often listed as a plus

Share of open postings that mention each skill: Python — 22%, AWS — 18%, Kubernetes — 14%, DevSecOps — 12%, Java — 11%, LLM — 11%.

Where the openings are

• 🇺🇸 the US265
• 🇵🇱 Poland72
• 🇬🇧 the UK57
• 🇮🇳 India37
• 🇩🇪 Germany32
• 🇨🇦 Canada31

Open positions by employer country; remote roles are often open to other countries too.

Where to apply

• Company career sites — your application goes straight to the team67%
• Job boards — aggregators and job sites28%
• Telegram channels — job channels4%

Where the openings come from: 67% from company career sites (direct apply), 28% from job boards, 4% from Telegram channels.