Senior Cloud Application Security Engineer

About this role

Your responsibilities

• Provide production-focused security oversight for applications, APIs and microservices
• Review Defender for Cloud and Sentinel alerts, recommendations and security findings
• Operate and improve continuous vulnerability assessment and VAPT, including the AI-enabled security-validation platform when selected
• Correlate findings and telemetry from Defender for Cloud, Sentinel, Azure Front Door/WAF, API Management, AKS, OpenTelemetry, Azure Monitor and Grafana
• Investigate suspicious activity and potential attack paths; assess exposure, exploitability and business risk
• Support application/API threat modelling, design reviews and secure development; assess authentication, authorisation, access controls, secrets, dependencies, containers and supply-chain risks
• Validate findings, filter false positives, prioritise remediation, coordinate fixes with CloudOps and development teams, and retest through closure
• Tune assessment and detection configurations; support incident investigations, evidence collection, post-incident reviews and security reporting

Your qualifications, skills and experience

• At least 5 years of relevant application security, cloud security, vulnerability management or security engineering experience, with senior-level ownership of investigations or remediation
• Hands-on experience in application/API security testing, vulnerability triage and remediation validation
• Practical knowledge of Azure security, especially Defender for Cloud and Sentinel; familiarity with KQL, Azure Monitor, Log Analytics and OpenTelemetry is an advantage
• Understanding of web/API risks, secure development, authentication, authorisation, access control, containers, AKS/Kubernetes and software supply chains
• Experience with DAST, API scanning, vulnerability assessment or continuous VAPT
• Experience with .NET, ASP.NET (MVC, Web API), Web Services, and SQL DBs
• Clear communicator in English, able to explain findings to developers, CloudOps, security colleagues and management
• Investigative, evidence-led and collaborative; prioritises risk pragmatically and follows remediation through validation
• Careful to test production systems only within approved scope and change controls.
• Focused on improving production defence

Location

We offer you

• An open-minded, international and fast-paced environment where decisions are made quickly, ideas are welcomed and people are encouraged to make a real impact

• A meritocratic culture built on ownership, performance and continuous feedback, where ambition is recognized and contribution matters

• The opportunity to influence decisions, challenge the status quo and shape better ways of working, while collaborating across teams and functions

• A strong commitment to continuous learning and professional development, with support to grow your expertise, capabilities and career

• A values-driven culture where we Care by building trust and lasting relationships, Commit by taking ownership and delivering on our goals, Collaborate by bringing the right people and expertise together, and Challenge ourselves to raise the bar and achieve stronger outcomes

How to apply

If you are passionate about joining a growing and motivated team of financial services enthusiasts and want to contribute to the growth of a leading international FinTech company, please click below to apply.

About us

additiv is a Swiss-based fintech and part of Temenos, partnering with the worlds most ambitious companies to accelerate financial innovation and time to market, running on any core system. Its cloud-native, API-first, AI-embedded Financial Services Orchestration Platform connects core systems with third-party providers and ecosystem partners through one open, modular architecture, letting institutions design, source, operate and distribute across wealth, credit, insurance and banking.   

Built for scale, additiv enables institutions to digitalize, orchestrate and expand their financial services offering without disruption, across any channel and for any client journey. With 400+ institutions already running on additiv, new services live in weeks, not years.   

Fast. Scalable. Fully compliant. 

Adding innovation to any core. 

For more information, please visit www.additiv.com / www.temenos.com

For press enquiries, please contact: media@additiv.com