Application Security Engineer

Team description:

The Cybersecurity team is a strategicfunctionwithinTME’s IT & Digital division, supporting the transformation of Toyota’sEuropean IT operations. Joiningthis team meanscontributing to resilientsecurityframeworks, helpingmanagecyberrisks in a modern enterprise environment, and playing a visible role in building a proactivesecuritycultureacrossdigitalassets and operations. The team’smissionis to protectToyota’sinformationassets, support regulatory compliance, and enablesecureinnovationacross the organization.

Role Summary:

We arelooking for anApplication Security Engineerwhoisexcited to helpshape and strengthensecure software development practicesacross a complexenterprise environment.

In this role, youwillworkclosely with development teams to embedsecurity by design, promote a “shift-left” securityapproach, and supportsecure development practicesatscale. Youwillleadthreatmodellingactivities, helpteamsstrengthensecurecodingpractices, and contribute to the evolution of applicationsecuritycapabilitiesacross the organization. Thisis a strongopportunity for someonewhoenjoyscombiningtechnicaldepth, collaboration, and practicalimpact.

Formal Role Details:

• Job Type: Permanent contract
• Start date: From October 2026
• Location: Wrocław, Silver Tower Office Center
• Working Pattern: Hybrid – typically 2 to 3 days per week in the office, offering flexibility alongside collaboration with the team
• Reporting line: Manager Application security
• Education level: Master’s degree or equivalent relevant experience

What we can offer you:

• Health insurance
• Sport card
• Lunch subsidy
• Car leasing
• Languages lessons
• Bonuses

Daily tasks

• Integrate security practices into development pipelines, including SAST/DAST and CI/CD security controls
• Promote secure-by-design principles and “shift-left” engineering practices across teams
• Conduct threat modelling for applications and projects, defining mitigation strategies and security requirements
• Support teams in identifying and remediating vulnerabilities effectively
• Act as a trusted application security partner for development teams and projects
• Translate complex technical risks into clear, actionable guidance for technical and non-technical stakeholders
• Help grow a Security Champions community and strengthen security awareness across engineering teams
• Support and coach engineers in strengthening secure coding practices and shared ownership of security
• Collaborate with security experts and cross-functional teams to share best practices and standardise approaches
• Contribute to documentation, guidelines, and reusable security assets
• Measure and improve application security maturity (e.g., using models such as SAMM)
• Provide regular reporting on security posture, risks, and improvement actions

Requirements

Qualifications

• Relevantexperience in Application Security, PenetrationTesting, Secure Software Development, or a closelyrelatedarea
• Experienceworking in large and/orcomplexenvironments with a range of stakeholders
• Experience as a developer, architect, securityengineer, or in anotherrelevantbackground with exposure to the software development lifecycle

We welcomecandidates from non-traditionalcareerpaths and those with transferableskillsorequivalentpracticalexperience. Ifyoumeetmany of the requirements but not every single one, we stillencourageyou to apply. We valuepotential, curiosity, and a willingness to learnalongsidetechnicalexperience.

Core Technical Skills

• Good understanding of applicationsecurityvulnerabilities and remediationtechniques
• Experience performing threat modelling with development teams
• Practicalprogrammingexperience in atleast one language
• Ability to helpintegrate and scalesecuritytestingwithin CI/CD pipelines

Communication & Leadership Skills

• Ability to explaincomplextechnicalconceptsclearly to a range of audiences
• Ability to buildstrongworkingrelationships and positively influence stakeholdersacrossdifferentteams
• Collaborativemindset with aninterest in coaching, mentoring, continuous learning, and helpingotherssucceed

Desirable Skills

• Familiarity with frameworks such as SAMM, BSIMM, NIST SSDF
• Knowledge of:
• Cloud security (AWS, Azure, GCP)
• Container and Kubernetes security

Certifications (Optional)

• CSSLP, OSCP, or equivalent security certifications

You have a TOYOTA DNA, this means:

• Courage: you are ready to let go of the easy path to reach challenging targets.
• Collaboration: you are a team player, respectful and inclusive in your style, and you take a customer-oriented approach.
• Creativity: your passion drives you to explore innovative ideas and challenge the impossible.
• Curiosity: you combine imagination and fact-based observation.
• Coaching: you share knowledge and feedback with your colleagues and celebrate each other’s success.

Must have: CI/CD, Cloud, Kubernetes