Application Security Engineer

ENTERSOFTONE: Redefining Business Software in an AI-powered Future

ENTERSOFTONE (ES1), is the leading business software vendor in SE Europe with more than 1,500 employees and an extensive network of 700+ specialized partners, effectively serving a growing customer base of 90,000+ businesses across four countries (Greece, Cyprus, Bulgaria, and Romania).

Driven by a strong vision, long-term strategy, and deep expertise, ES1 bridges the gap between cutting-edge innovation and real business challenges, delivering reliable, intuitive, and scalable solutions for sustainable growth. Utilizing Cloud, Web, and AI technologies, we offer a comprehensive product portfolio (ERP, CRM, HCM/Payroll, WMS, Accounting, e-Invoicing, Digital Commerce, mobile applications and industry-specific solutions) that empowers every business, enabling it to work smarter, faster, and more successfully.

At ES1, we turn innovation into real business value - unlocking the full potential of enterprises in today’s fast-changing digital era.

We are looking for a motivated Application Security Engineer to join our dynamic and high-caliber team.

The Role

Reporting to the CISO and collaborating with Information Security Officers, development, DevOps and product teams, you will embed security across our ERP, CRM and cloud products. As our first dedicated Application Security Engineer, you will establish security standards, tooling and automation, build a network of security champions, and shape the growth of our application security function.

Your contribution to the success of the team

• Maintain our Secure Software Development Lifecycle and the secure coding standards that underpin it
• Conduct threat modeling and security design reviews for new products and significant changes, including the AI features in our products
• Manage our SAST and SCA platform, optimizing how development teams use it and reporting the key metrics it produces
• Define which security findings block a release, and integrate security checks into our delivery pipelines with the support of our Security Engineer
• Triage and prioritize software vulnerabilities found through SAST, SCA, penetration testing and DAST with our Security Operations Analysts, and drive their remediation by development teams within policy timeframes
• Contribute to the effective use of our penetration testing and DAST platforms, from scoping application tests to validating fixes
• Work with our Security Engineer on web application firewall exceptions, and take the issues the WAF identifies to the development teams
• Run the intake and assessment of vulnerabilities reported in our products, and provide the technical input for security advisories and EU Cyber Resilience Act notifications
• Define Software Bill of Materials (SBOM) requirements and manage software supply chain risk
• Vet secure development training content, and identify and support security champions across our development teams
• Help shape the future of our application security function

Your Qualifications & Competencies

• 5+ years of experience in software engineering or information security, including 3+ years in a dedicated application security role
• Professional software development experience in at least one widely used language, sufficient to read, review and contribute code
• In-depth knowledge of application and API security risks across all major vulnerability classes
• Hands-on experience operating and tuning SAST, SCA, DAST and secrets scanning tools, and driving their adoption by developers
• Practical experience with threat modeling and with integrating security into CI/CD pipelines
• Penetration testing knowledge sufficient to reproduce, validate and triage findings
• Familiarity with software supply chain security, SBOMs and secure development frameworks such as OWASP SAMM, OWASP ASVS and NIST SSDF
• An understanding of AI and LLM application security risks
• Strong communication skills: you can turn a finding into clear guidance for developers and into business risk for leadership
• Ability to influence engineering practice without direct authority
• Excellent written and spoken English is required
• Knowledge of the regulatory obligations for software products, including the EU Cyber Resilience Act, is considered a plus
• Experience with enterprise software such as ERP or CRM products is considered a plus
• Professional certifications such as CSSLP, OSWE, GWAPT or OSCP are considered a plus
• Practical experience working with AI tools is a strong advantage, as our Security team operates in an AI-first environment and uses AI extensively in day-to-day work

Your Benefits:

We are growing our team with the vision of having top performers who contribute directly to the growth of the company. As a result, we offer:

• Competitive remuneration package
• Private health insurance plan
• Hybrid working model
• Opportunity to work alongside people who are always eager to mentor
• Transportation with company’s bus from central stations
• Funded training & development opportunities
• Catering food services

Be ONE of Us

At ENTERSOFTONE, our purpose is to bridge cutting-edge technology with real business needs, helping organizations grow faster and work smarter.

Joining us means becoming part of a dynamic environment driven by passion, trust and commitment, where we embrace innovation, break new grounds and put people first.

We invest in our people, encourage continuous learning and create opportunities to grow, take initiative and make a meaningful impact.

In accordance with the EU Pay Transparency Directive (EU) 2023/970, compensation details for this position will be communicated to candidates by our Talent team at an appropriate stage prior to the interview process.