Role Description We at Sigma Software are looking for a Senior Java Engineer to join an exciting project in the domain of audience segmentation and engagement. This is a remote role open to candidates from Ukraine and Europe, offering the opportunity to work with cutting-edge technologies and high-scale systems. You will be part of a team building a real-time platform that powers communications, personalization, automation, and customer engagement across diverse ecosystems. At Sigma Software, we value innovation, collaboration, and technical excellence. Why join us? You’ll work on challenging tasks, contribute to architectural decisions, and have the freedom to experiment with new technologies while improving data systems at scale. Job Description - Design and implement core components of the audience segmentation platform - Develop and evolve a flexible segment definition language supporting complex targeting scenarios - Build scalable evaluation engines for processing large-scale entity and relationship data - Implement relationship-based audience resolution across multiple entity types - Optimize incremental recomputation for continuous data changes - Create event-driven pipelines for real-time segment accuracy - Ensure governance, auditability, and lifecycle traceability of segments - Design low-latency resolution services for high-scale operations - Develop caching strategies for dynamic segments and snapshots - Optimize system performance, scalability, and operational efficiency - Collaborate with product and engineering teams to define platform capabilities and architecture - Provide technical leadership and contribute to architectural decisions Qualifications - At least 5 years of backend engineering experience - Strong Java expertise - Proven experience building distributed systems - Knowledge of query engines, search platforms, rules engines, segmentation platforms, or analytics systems - Strong understanding of data modeling and domain-driven design principles - Experience with event-driven architectures - Skilled in designing scalable APIs and backend services - Strong problem-solving and performance optimization skills - Experience with cloud-native architectures - Ability to drive technical decisions and contribute to system architecture - Upper-Intermediate+ English level Requirements - Experience with recommendation engines - Knowledge of Quarkus - Experience building Customer Data Platforms (CDP) - Experience with marketing automation systems - Expertise in audience segmentation or personalization platforms - Familiarity with graph-based data models and relationship traversal - Experience with search technologies (Elasticsearch, OpenSearch) - Experience with stream processing technologies - Experience with Google Cloud Platform - Experience with large-scale analytics systems Benefits - Proactive and detail-oriented - Thrives in collaborative environments - Enjoys solving complex integration challenges - Comfortable experimenting with new technologies - Committed to improving data systems

Role Description We are looking for an Application Security Engineer to embed security throughout the software development lifecycle, partnering with engineering teams to design secure systems, identify vulnerabilities, and reduce risk across our application portfolio. The role blends hands-on offensive and defensive skills with strong communication and collaboration, helping development teams build secure software efficiently rather than slowing them down. The ideal candidate brings deep technical security expertise, strong software engineering fundamentals, and a track record of shipping security improvements that meaningfully reduce risk in production. Key Responsibilities - Conduct threat modeling and security architecture reviews for new and existing applications and services. - Perform manual code reviews, secure design consultations, and pair with engineering teams on hardening critical components. - Operate and tune SAST, DAST, IAST, SCA, and secret-scanning tools across CI/CD pipelines. - Drive vulnerability management workflows including triage, prioritization, owner assignment, and SLA tracking. - Build paved-road libraries and frameworks that make secure patterns the default for engineering teams. - Lead red-team and purple-team exercises against internal applications and drive remediation of identified weaknesses. - Implement and operate runtime protections including WAF, RASP, bot protection, and abuse-detection mechanisms. - Design and enforce secure authentication, authorization, session management, and cryptographic patterns. - Partner with infrastructure and platform teams to harden container, Kubernetes, and cloud environments. - Develop and deliver application security training, lunch-and-learns, and onboarding content for engineering staff. - Respond to security incidents involving application vulnerabilities or active exploitation. - Track and apply emerging threats and CVEs that may affect the application portfolio. - Maintain comprehensive, current technical documentation — including architecture diagrams, design decisions, configuration references, runbooks, and operational procedures. - Stay current with application security research and emerging defensive tooling. Qualifications - Bachelor’s degree in Computer Science, Cybersecurity, or a related field. - Five or more years of application security or security engineering experience. - Strong understanding of OWASP Top 10, common vulnerability classes, and modern exploit patterns. - Hands-on experience performing code review across at least two major languages. - Deep familiarity with SAST, DAST, SCA, and CI/CD-integrated security tooling. - Strong understanding of authentication, authorization, and cryptographic primitives. - Experience with cloud security and modern infrastructure controls. - Strong communication skills with technical and non-technical audiences. - Proficiency in at least one programming language for tooling and automation. - Experience working closely with engineering teams in an Agile environment. Preferred Qualifications - Industry certifications such as OSCP, OSCE, GWAPT, or CISSP. - Experience with offensive security tooling and red-team operations. - Bug bounty experience, public CVEs, or open-source security contributions. - Familiarity with AI/LLM application security considerations. - Exposure to regulated industries with strict compliance requirements. How to Apply Would you like to know more about this opportunity? For immediate consideration, please send your resume to [email protected] . Learn more about Bright Vision Technologies at www.bvteck.com .

Role Description We are looking for a Senior Application Security Engineer to architect and build automated security layers within the SDLC, engineering AI-enabled secure code scanning, hardened baseline automation, and CI/CD security tooling integration across a large-scale financial services program. You will work in Python and/or Java to deploy and tune SAST, DAST, and SCA tools, provide code-level remediation guidance to development teams, and operate with full autonomy building automated security runbooks. The role requires 6+ years of software engineering experience with a strong AppSec and DevSecOps focus. What You Will Do - Engineer and deploy AI-enabled secure code scanning capabilities and “Golden Images” to drive secure-from-the-start adoption; - Automate the development of secure coding patterns and integrate them with traditional and Agentic SDLC workflows; - Architect the integration of continuous security scanning tools (SAST, DAST, SCA) into enterprise CI/CD pipelines, tuning them to eliminate noise; - Act as a senior technical SME, reading and reviewing complex application code (Java/Python) to provide software engineers with code-level remediation guidance. Qualifications - 6+ years of software engineering experience with a strong focus on Application Security and DevSecOps; - Strong coding and architectural proficiency in Python and/or Java; - Deep hands-on experience with SAST, DAST, SCA tools and CI/CD integration; - Fully autonomous execution capability without daily supervision; - Upper-intermediate English level. Nice to Haves - Experience integrating LLMs, AI agents, or automated coding assistants for vulnerability triage or secure code generation; - Advanced application threat modeling experience. Benefits - Remote work & local connection: Work where you feel most productive and connect with your team in periodic meet-ups. - Legal presence in India: Full local compliance and structured work environment. - Competitive compensation in INR: Dedicated budgets for growth, education, and wellness. - Innovative projects: Work with modern technologies and global clients.

Role Description We are looking for an experienced Application Security Engineer to join our cybersecurity team. The ideal candidate will be responsible for securing web applications and APIs by integrating security throughout the Software Development Life Cycle (SDLC). This role involves: - Implementing security tools - Identifying and validating vulnerabilities - Supporting remediation efforts - Collaborating with development teams to build secure applications Qualifications - Bachelor's degree in Computer Science, Information Security, or a related field - 7+ years of experience in Application Security or Cybersecurity - Hands-on experience with SAST, DAST, and vulnerability assessment tools - Strong knowledge of OWASP Top 10, API Security, and secure coding practices - Experience integrating security tools into CI/CD environments such as Jenkins, GitHub Actions, or GitLab - Familiarity with scripting languages such as Python, Bash, or PowerShell - Excellent analytical, troubleshooting, and communication skills Requirements - Implement and maintain security controls for web and API applications - Integrate security practices into the Secure SDLC, including threat modeling and security design reviews - Ensure compliance with organizational security policies and industry best practices - Manage and administer vulnerability scanning tools such as Tenable or equivalent solutions - Configure, optimize, and maintain scanning policies and schedules - Improve scan accuracy by reducing false positives and fine-tuning security tools - Deploy and manage Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) solutions - Integrate security testing into CI/CD pipelines - Work closely with development teams to ensure effective security testing and reporting - Identify, validate, and assess application vulnerabilities through automated and manual testing - Perform risk assessments and prioritize vulnerabilities based on business impact - Track remediation activities and ensure timely closure of security findings - Conduct manual and automated security assessments of web applications and APIs - Validate reported vulnerabilities and verify remediation after fixes are implemented - Document findings, attack scenarios, and remediation recommendations - Perform manual verification of vulnerabilities using penetration testing techniques - Develop proof-of-concept demonstrations when required - Support security assessments and red team activities Preferred Qualifications - Experience in threat modeling and secure architecture reviews - Hands-on exposure to penetration testing or red team activities - Industry certifications such as OSCP, CEH, GWAPT, CSSLP, or equivalent are preferred