Application Security Engineer

Job Tile: Application Security Engineer
Reporting to: Senior Technical Systems Engineer (day-to-day)
Department: IT - Security
Location (primary): Iasi - Hybrid

Job Purpose
We are looking for an Application Security Engineer to join our growing Group Security team here at Webjet Limited. This is is a wide-ranging role that covers a set of key responsibilities including managing our third-party risk assessments, project risk assessments, understanding key risks to the business and working with our stakeholders and development teams to put appropriate controls in place to mitigate these risks.

Key Responsibilities


Understand our internal threat landscape and work with relevant teams to mitigate related risks.


Support and collaborate with development and platform engineering teams in building security into DevOps processes.


Champion our vulnerability management program to understand key weaknesses to the business and help tune these controls.


Collaborate with development teams to investigate security alerts raised and track through to remediation.


Champion our security review process by performing risk assessments for new projects and enhancements to understand key risks and appropriate mitigations to the business.


Work closely with our key stakeholders to ensure they understand their environment and business processes to identify key risks and provide advice on what appropriate controls could be implemented to reduce our exposure to risk.


Support the audit function within the team to ensure we are operating to internal and relevant industry standards.



Required Experience and Knowledge
Essential
Qualifications & Knowledge


Experience with cloud technologies in AWS & Azure. (AWS is essential)


Understanding of risk management and conducting a technology-specific risk assessment.


Ability to explain security risks and concepts in layman terms.


Research and recommend new security technologies to new or existing problems and be able to explain and communicate design decisions.


Have strong communication skills and be comfortable providing feedback and updates to key stakeholders within the business.  


Enjoy finding solutions to problems and working effectively with others to reach agreement. 


A professional approach to work, integrity, and respect for policies.



Experience, Skills and Behavioural Requirements


2 yrs + experience in a similar role.


Prior experience with Web Development and Software Engineering with C#, PHP, Golang, Python or other languages


Experience with hardening and security of Linux operating system  


Hands-on technical security/penetration testing for Web applications


Experience with security related architecture & code reviews and security assurance activities


Knowledge of OWASP top 10 and relevant controls




About WebBeds
Launched in, WebBeds is the world’s fastest growing B2B travel intermediary, or ‘bedbank’, providing accommodation and ground product distribution services to the travel industry. We source content from travel suppliers, aggregate and merchandise that content in the WebBeds platform, then distribute it to our global network of travel trade clients, who sell to the travelling public.

Our clients – online travel agencies, retail travel agents, corporate travel managers, tour operators, wholesalers, tourism boards, super apps, DMC’s, group providers, airlines and more – access the company’s huge global inventory of more thanhotels (comprisingdirect contracts, 70+ integrated third-party providers and 60+ major hotel chains) through market-leading, trade-only booking websites or via simple and seamless API connectivity. In addition to hotel product, clients can also book over 5,500 transfer services in 1,200 destinations along with thousands of guided excursions and tickets for attractions.

Our supplier partners – global hotel chains, independent hotels, apartments, resorts, attractions, transfer and sightseeing companies and more – benefit from our global distribution network of overtravel companies in more than 145 source markets and are supported by a local dedicated point of contact focused on ensuring we deliver value, choice, expertise and an unrivalled level of service.

WebBeds operates global coverage through four geographic regions – Europe, Asia Pacific, MEA (Middle East and Africa) and Americas - with over 1,400 travel professionals working in 50 offices worldwide. WebBeds also operates specialist brands JacTravel DMC and Umrah Holidays International. JacTravel DMC provides tailormade travel arrangements for offline FIT and groups traveling to the UK, Ireland and key mainland European destinations to the international travel trade. Umrah Holidays International is a genuine pioneer, providing online pilgrimage travel services to travel agencies worldwide.

Find out more about the WebBeds business at

WebBeds is a division of Webjet Limited (ASX: WEB).