(Senior) Application Security Engineer — Sygnum Bank
- Location
- Zurich
- Contract
- full-time
- Posted
- 217 days ago
Role overview
This is a hands-on technical role for someone who can operate deeply across modern application security disciplines and cloud-native environments.
You will contribute to application security across our platform, covering web, mobile, APIs, backend services, and cloud infrastructure, by embedding security into engineering processes, CI/CD pipelines, and runtime environments.
Your main responsibilities include
- Integrate and improve security controls within CI/CD pipelines including SAST, DAST, SCA, and IaC scanning to strengthen DevSecOps practices.
- Configure, operate, and optimise application security tooling, ensuring findings are actionable and integrated into engineering workflows.
- Partner with engineering, platform, and product teams to design and implement secure-by-design architectures, perform threat modelling and promote secure development practices.
- Evaluate open-source dependencies and contribute to software supply chain security initiatives.
- Assess and secure AI-enabled applications and services, including AI/LLM integrations, AI supply chain risks, model security controls, and secure deployment patterns.
- Review and harden Infrastructure-as-Code implementations to enable secure cloud deployment patterns and reusable guardrails.
- Assess the security design of smart contracts, blockchain integrations, and third-party Web3 services.
- Partner with SOC and engineering teams to improve detection, alerting, and response capabilities for application-layer threats.
- Your main responsibilities include:
- Integrate and improve security controls within CI/CD pipelines including SAST, DAST, SCA, and IaC scanning to strengthen DevSecOps practices.
Main responsibilities
- Your main responsibilities include:
- Integrate and improve security controls within CI/CD pipelines including SAST, DAST, SCA, and IaC scanning to strengthen DevSecOps practices.
Application process
- This is a hands-on technical role for someone who can operate deeply across modern application security disciplines and cloud-native environments.
- You will contribute to application security across our platform, covering web, mobile, APIs, backend services, and cloud infrastructure, by embedding security into engineering processes, CI/CD pipelines, and runtime environments.
- Configure, operate, and optimise application security tooling, ensuring findings are actionable and integrated into engineering workflows.
- Partner with engineering, platform, and product teams to design and implement secure-by-design architectures, perform threat modelling and promote secure development practices.
- Evaluate open-source dependencies and contribute to software supply chain security initiatives.
- Assess and secure AI-enabled applications and services, including AI/LLM integrations, AI supply chain risks, model security controls, and secure deployment patterns.
- Review and harden Infrastructure-as-Code implementations to enable secure cloud deployment patterns and reusable guardrails.
- Assess the security design of smart contracts, blockchain integrations, and third-party Web3 services.
Additional details
- Relevant education, certifications, or equivalent practical experience.
- Sygnum offers a comprehensive package of benefits for all team members.
- Attractive combination of market salaries and entrepreneurial incentive scheme Flexible/Work at home policies
Notes and original content
- Bonus points for:
- They include:
- Attractive combination of market salaries and entrepreneurial incentive scheme
- Flexible/Work at home policies
Questions about this listing
What salary does Sygnum Bank offer for this role?
Sygnum Bank lists CHF 121'500 - 206'500 gross per year for this position in Zurich. This is the salary published in the original listing (or, when the employer omits a figure, a realistic estimate for the role and sector) — the calculator on this site converts it to your actual net take-home once cross-border tax and social contributions are applied.
Is this a full-time role, and what type of contract does Sygnum Bank offer?
This listing is a full-time position. The contract type shown here comes directly from the employer's original posting; always confirm exact hours, notice period and probation length with Sygnum Bank during the application process, since these details can vary by role even within the same contract category.
Do I need a cross-border work permit for a role in Zürich?
EU/EFTA residents living in the border zone of the country adjoining Canton Zürich can apply for a G permit; the Swiss employer files it with that canton's migration office after the contract is signed. Border-zone rules and processing times vary by neighbouring country and canton, so confirm the specifics with Zürich's cantonal migration office or with HR during the application.
How do I apply for this position at Sygnum Bank?
Use the "Apply now" button on this page — it links directly to Sygnum Bank's original listing at sygnumpeopleportal.my.salesforce-sites.com, so your application goes straight to the employer's own applicant-tracking system. Frontaliere Ticino does not collect or forward applications itself.
