Application Security Engineer

We build tech with art at the heart. Artest is a product-focused tech company based in Yerevan. We design products, build software systems, and grow a strong quality culture — with art at the heart of everything we do. We believe every professional should feel seen, inspired, and trusted. At Artest, we’ve created a space where ideas come to life through collaboration, passion, and precision. We invite a Senior Application Security Engineer to join our team. ✅ Responsibilities: ✔️ Demonstrated ability to collaborate with other teams to achieve complex objectives. ✔️ Responsible for security architecture design from cloud infrastructure to application through the implementation of "secure by design" principles. ✔️ Collaborate with product managers, architects, and developers on the implementation of the security controls platform ecosystem and products. ✔️ Proof security implementations within infrastructure and application deployment manifests and the CI/CD pipelines. ✔️ Define required policies, controls, and capabilities for the protection of products and environments. ✔️ Build and validate declarative threat models automation. ✔️ Participate in engineering teams’ product planning cycles and committees. ✔️ Oversee the product security aspects for migration of products and services from Data Center to public cloud, e.g., AWS. ✔️ Serve as a trusted cyber security advisor to product and application teams. ✅ Requirements: ✔️ Minimum of 3 years experience as an Application Security Engineer. ✔️ Experience integrating security scanning/tooling into development pipeline. ✔️ Experience in analyzing and securing microservices and applications developed using Javascript and Typescript. ✔️ Experience with CI/CD pipelines (such as Gitlab, Jenkins) and infrastructure-as-a-code models (such as Terraform, Helm, or CloudFormation). ✔️ Hands-on development experience in Python/shell scripting. ✔️ Strong understanding of supply chain security, software integrity, and secure software delivery. ✔️ Experience with docker and mesh technologies (such as ISTIO). ✔️ Experience with architecture and security reviews, threat modeling and applications risk highly desired. ✔️ Experience working with Agile methodologies. ✔️ Knowledge of privacy laws and regulations, such as GDPR desired. ✔️ Familiarity with industry regulations, frameworks, and practices. For example, PCI, ISO 27001, NIST, etc. ✅ PREFERRED QUALIFICATIONS: ✔️ In-depth experience with architecting secure services on Kubernetes. ✔️ Extensive experience with architecting secure services on AWS or on-prem data centers. ✔️ Security-related professional certifications e.g., CISSP, CISM, CCSK, CCSP, CEH is highly desirable. ✅ We offer excellent benefits, including but not limited to: 💻 Learning and development opportunities and interesting, challenging tasks. ✈️ Relocation package (tickets, staying in a hotel for up to 2 weeks, and visa relocation support for our employees and their family members). 📚 Opportunity to develop language skills, with partial compensation for the cost of English/Spanish language classes (for localization purposes). 🏥 Private medical coverage. 🏝 Time for proper rest, with 20 non-business days per year and an additional 6 paid sick days. 📈 Competitive remuneration level with annual review. 🤝 Team building activities.