Wrike - Application Security Engineer

• Strong hands-on knowledge of common web and API security issues, authentication and session management concepts, secrets handling, and secure coding fundamentals. • Proven experience conducting secure code reviews in modern engineering environments, especially in Java, TypeScript, and PHP, with the ability to clearly explain security flaws and collaborate on effective remediation. • Experience leading or facilitating routine threat modeling for product features or services and translating outcomes into actionable security requirements. • Experience managing Application Security tools such as SAST, SCA, DAST, and secrets scanning solutions, as well as bug bounty platforms, with a focus on CI/CD integration, false positive reduction, and signal quality improvement. • Working knowledge of OAuth/OIDC, service-to-service authentication, secrets management, and foundational cloud or container security concepts. • Ability to prioritize findings based on exploitability, exposure, business impact, and remediation effort rather than relying on severity labels alone. • Strong written and verbal communication skills, with the ability to work effectively with engineers, technical leads, and product stakeholders. • Sound judgment when using AI-assisted workflows, treating AI as a copilot rather than an authority and validating correctness, exploitability, and business context before taking action. • Standout Qualities: • Standout Qualities: • Experience building AppSec automations, improving developer workflows, or tuning security controls in CI/CD environments. • Experience delivering practical secure coding guidance or lightweight internal security training. • Background in privacy-sensitive systems, cloud-native services, or multi-service architectures. • Experience supporting security for AI/ML product features, model-integrated systems, or governance of AI-assisted engineering workflows. • Team Dynamics: • Team Dynamics: • You will partner closely with backend, frontend, mobile, platform, QA, and product teams on a daily basis, while also collaborating with peers across security, infrastructure, and compliance. Success in this role will require building trusted relationships with engineers, communicating clearly, and translating security concerns into practical guidance that teams can adopt quickly. • Our Work Style: • Our Work Style: • This is a collaborative, hands-on role embedded in the software development lifecycle. You will work closely with product and engineering teams to integrate security into design, development, and delivery processes, helping create secure-by-default outcomes without slowing teams down. • You’ll use a combination of secure review practices, threat modeling, AppSec tooling, CI/CD integrations, and structured AI-assisted analysis to support high-quality security decisions. What makes this role especially impactful is the opportunity to influence both product security posture and developer experience at scale, helping teams move fast while building securely.