> Markdown version of [/jobs/ext/4219547-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/4219547-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Application Security Engineer - **Company:** TheFork - **Location:** Spain - **Contract:** Permanent contract - **Skills:** Amazon Web Services, User Authentication, Cloud Computing, Information Systems, Infrastructure as a Service (IaaS), Information Technology Operations, Node.Js, Object-Oriented Software Development, Open Web Application Security, Software Engineering, TypeScript, Web Applications, Software Security, HybridCloud, Information Technology - **Published:** October 23, 2026 - **Apply:** https://startup.jobs/application-security-engineer-the-fork-10557811 ## About the Role * Bachelor's Degree, preferably in a technical field i.e. Information Systems or Computer Science. * Security certifications are desired but not required (CISSP, GIAC, CEH, Security+, CSSLP). * At least 4+ years of demonstrated manual security testing * You must have a solid understanding of security protocols, cryptography, authentication, authorization, and general application security requirements * Experience implementing and operating security technologies and processes in a hybrid cloud environment, such as AWS. * Strong understanding of IT operations and service support processes ## Description Are you passionate about securing the application development pipelines and ensuring the security of web applications? Are you looking to thrive in a fast-paced environment? If so, TheFork is looking to hire an Application Security Engineer for our ever-growing security team. In this role, you will evaluate the security posture of TheFork's applications and systems. Main activities: * Scanning TheFork web applications looking for vulnerabilities and ensuring they get fixed * Working knowledge of any object-oriented programming language (eg. Node / Typescript) * Strong IaaS security skills, with a focus on cloud technologies like AWS. * Researching new security threats, vulnerabilities, and exploit techniques * Responding to new security threats and helping implement new requirements * Provides technical guidance and oversight when working with developers * Work in a team environment while maintaining the confidentiality of investigation information * Strong knowledge of working with OWASP concepts for various solutions