AWS Application Security Engineer
Pubblicato il 17-08-2026 - PRIMa in Milano
Are you looking for a new challenge?
Prima could be the place for you.
Since 2015, we’ve been using our love of data and tech to rethink motor insurance and bring drivers a great experience at a great price. Our story began in Italy, where we’ve quickly become the number one online motor insurance provider. To help fuel that growth, we need a Application Security Engineer to join our Security Engineering Team .
The Engineering Department is the beating heart of Prima. You’ll be joining over 350 engineers across software development, infrastructure, operations and security: fueled by curiosity, experimentation and collaboration, you’ll help deliver scalable, impactful solutions that shape the future of insurance.
Define security requirements and design application architectures following a secure-by-default approach.
Conduct threat modeling, code reviews, and penetration testing on cloud-based web and mobile apps to proactively identify vulnerabilities.
Implement, manage, and automate SAST/DAST/SCA security controls and WAF rules to enforce protection at scale.
Partner with Product teams to ensure robust protection and foster a security-first development culture.
Participate in the investigation, management, and resolution of security alerts.
Collaborate on all core activities and initiatives of the Security Engineering team.
Strong knowledge of web/mobile security vulnerabilities, AI security risks, and industry standards (e.g., Hands-on experience with threat modeling frameworks (e.g., STRIDE), code reviews, penetration testing, and SAST/DAST/SCA tools.
Proficiency in scripting/programming (e.g., Python, Rust) and experience with CI/CD systems and Infrastructure as Code (e.g., Availability for on-call shifts to guarantee 24x7 security monitoring and support.
Self-motivated and proactive problem-solvers with strong English communication skills and experience in Agile environments.
Practical experience with secure AWS design/implementation and Kubernetes (EKS) securi