Application Security Engineer
Pubblicato il 08-09-2026 - Jobcubby in Milano
ppAre you looking for a new challenge?
Fancy helping us shape the future of motor insurance?
Prima could be the place for you.
Since ****, we've been using our love of data and tech to rethink motor insurance and bring drivers a great experience at a great price.
Our story began in Italy, where we've quickly become the number one online motor insurance provider.
In fact, we're trusted by over 5 million drivers.
And now we're expanding to help millions more drivers in the UK and Spain.
/ph3What you'll do /h3ulliDefine security requirements and design application architectures following a secure-by-default approach.
/liliConduct threat modeling, code reviews, and penetration testing on cloud-based web and mobile apps to proactively identify vulnerabilities.
/liliImplement, manage, and automate SAST/DAST/SCA security controls and WAF rules to enforce protection at scale.
/liliPartner with Product teams to ensure robust protection and foster a security-first development culture.
/liliParticipate in the investigation, management, and resolution of security alerts.
/liliCollaborate on all core activities and initiatives of the Security Engineering team.
/li /ulh3What we're looking for /h3ulliStrong knowledge of web/mobile security vulnerabilities, AI security risks, and industry standards (e.g., OWASP Top 10, CWE).
/liliHands?on experience with threat modeling frameworks (e.g., STRIDE), code reviews, penetration testing, and SAST/DAST/SCA tools.
/liliProficiency in scripting/programming (e.g., Python, Rust) and experience with CI/CD systems and Infrastructure as Code (e.g., Pulumi).
/liliAvailability for on?call shifts to guarantee 24x7 security monitoring and support.
/liliSelf?motivated and proactive problem?solvers with strong English communication skills and experience in Agile environments.
/li /ulh3Nice?to?have /h3ulliPractical experience with secure AWS design/implementation and Kubernetes (EKS) security.
/liliHands?on experience with WAF configurations (e.g., Cloudflare) and EDR, SIEM, or SOAR platforms.
/liliRelevant industry certifications (e.g., OSCP, OSWA/E, BSCP, PWPA/E, eWPT, or similar).
/liliActive involvement in security research, bug bounty programs, or CTF competitions.
/li /ulp€55 - €70 a year /ph3Why you'll love it here /h3ulliWork Your Way: Enjoy full flexibility – work from home, the office or a mix of both.
Plus, work from anywhere for up to 30 days a year.
/liliThis is a full remote position and we're considering candidates located in Italy, Spain or UK.
/liliGrow with us: We may move fast at Prima, but we move together.
Get access to learning resources, mentorship and a growth plan tailored to you.
/liliThrive and perform: Your best work begins when you feel your best.
Enjoy private healthcare, gym discounts, wellbeing programs and mental health support.
/li /ulpAt Prima, we celebrate uniqueness.
If you don't meet every requirement but are passionate about this role, we still want to hear from you.
Innovation thrives on diverse perspectives.
/ppPrima is proud to be an equal opportunity employer.
Need accommodations during the process?
Email us at Let's build the future of insurance, together.
/p /p #J-*****-Ljbffr