Role Description We are hiring a Application Security Engineer to be the senior technical anchor for product and platform security at UniUni. You will set the bar for how we build secure software, embed security into our engineering pipelines, and harden our customer-facing products. This is a hands-on role where you will: - Write code, review code, and build tooling. - Lead the technically hardest work across application security, DevSecOps, and platform security. - Set standards that scale while digging into real systems to find real problems and ship real fixes. What you'll do - Application Security - Lead threat modeling on new and existing services. - Run our secure code review program, including design of review playbooks. - Operate and tune our AppSec tooling stack across SAST, DAST, SCA, and secrets scanning. - Own the third-party penetration testing program in partnership with the ISO. - Drive standards for authentication, authorization, session management, and API security. - Platform Security and DevSecOps - Embed security controls into our CI/CD pipelines. - Harden our cloud workloads on AWS, including container and Kubernetes security. - Codify infrastructure security baselines as IaC and policy. - Partner with the platform team on identity-aware access to infrastructure. - Product Security - Engineer enterprise SSO (SAML 2.0 and OpenID Connect) into customer-facing products. - Set the technical direction for API security. - Drive secure-by-default patterns for data handling in our products. - Be the senior technical voice in customer security reviews. - Across All of It - Triage and lead response to application and platform security incidents. - Mentor engineers on secure design and secure coding. - Contribute to ISO 27001 and SOC 2 evidence, control design, and audit readiness. Qualifications - 8+ years building and securing production software, with a focus on application security, product security, or DevSecOps. - Deep, demonstrable software engineering ability. - Hands-on experience securing AWS workloads at scale. - Working command of modern AppSec tooling and CI/CD deployment. - Strong threat modeling skills with a track record of turning models into shipped controls. - Practical experience implementing SAML 2.0 and OpenID Connect. - Experience leading the technical response to security incidents in production environments. - Ability to influence engineers and engineering leaders without authority. Nice to Have - Experience in logistics, supply chain, marketplaces, or other high-volume transactional businesses. - Background contributing to or maintaining open source security tooling. - Prior experience supporting ISO 27001 or SOC 2 control design from the engineering side. - Offensive security background (CTFs, bug bounty, red team). - Experience hardening LLM-integrated or AI-powered features in production. Why This Role This is a senior IC role with real scope. You will set standards that the engineering organization adopts because you will have built them, shipped them, and proved they work. You will report to the Information Security Officer in a security function with executive commitment, a live ISO 27001 certification, and an active SOC 2 Type II attestation, and you will have the autonomy and the mandate to make UniUni's products and platform meaningfully more secure.

• Configure and customize Parsec TrakSYS to support manufacturing execution workflows • Develop and maintain TrakSYS objects, screens, reports, and event models • Support enhancements and new feature rollouts in line with production requirements • Design and support integrations between TrakSYS and ERP systems (e.g., SAP, Oracle) and other operational tools • Build and maintain data pipelines, APIs, and reporting connections to ensure accurate, timely data flow • Troubleshoot interface issues and optimize data exchange between manufacturing and business systems • Diagnose and resolve workflow, system, and data issues in live production environments • Partner with the client's Systems Solutions team to triage and close support tickets promptly • Document root cause analyses and contribute to a knowledge base for recurring issues • Identify opportunities to improve manufacturing workflows and system performance • Contribute to standards, best practices, and documentation for the MES environment • Participate in regular syncs with U.S.-based stakeholders to align on priorities and deliverables

• Provides technical support to sales and customers on specific applications and production processes in factory and process automation. • Proposes customer specific solutions. • Responsible for specification lists for the specific industry segments. • Maintains files consisting of technical data, application examples, competitor info, test data and additional information. • Creates Requirement Specification together with the customer. • Provides technical training and arranges knowledge transfer to the customer. • Assists in the identification and winning of projects based on application /automation/sector competence. • May serve as mentor for less experienced AE’s. • AEs will troubleshoot system failures.

• Collaborate in designing and building resilient, AI-integrated software for complex internal applications, with emphasis on API development, data services, and cloud infrastructure • Work hands-on with code and architecture to ensure systems align with user needs, company objectives, and the growing role of AI within our product suite • Build and maintain AI-powered features within internal applications, integrating APIs from providers such as OpenAI, Anthropic, and Google • Scope, implement, and harden LLM-connected capabilities with an emphasis on reliability, performance, and practical utility - from integration design through testing and production deployment • Write and manage application code, scripts, and automations using JavaScript, Python, and PHP • Design and maintain serverless Cloud Functions on AWS, with emphasis on performance, reliability, and clean integration with AI-driven workflows • Perform data management using MySQL and PostgreSQL. Ensure the scalability, reliability, and security of all database systems supporting both traditional and AI-enhanced application layers • Identify and resolve complex technical issues — including those specific to AI integration, model behavior, and API reliability — both independently and collaboratively, ensuring smooth operation across all systems and components • Maintain clear, precise documentation of code, AI workflows, system behaviors, and processes • Wield AI effectively across the full development lifecycle - using tools like Claude Code, Cursor, GitHub Copilot, and AI-enabled CLI utilities to accelerate coding, code review, debugging, and testing • Champion AI DevOps practices for how the team builds, iterates, governs, and scales applications: automated pipelines, AI-assisted testing, deployment tooling, and performance monitoring • Lead the implementation phase by overseeing code quality, performing reviews, and ensuring solutions follow best practices - including those specific to AI-integrated systems • Optimize application performance in cloud environments, focusing on efficient use of AWS services, SQS handling, and automated testing • Provide mentorship and guidance to the development team, including on AI integration approaches, development tooling, and application architecture