Application Security Engineer

Join our highly skilled team — breaking new ground and shaping the future of retail. We dare to dream big, we have the courage to

keep raising the bar, and we're committed to being a force for good in retail—helping both established and fast-growing brands

meet the ever-changing expectations of their customers.

Sitoo is a fast-growing technology company exploring how far we can take innovation to deliver the world's best Unified Commerce

Platform and Point of Sale. Our technology is used in more than 20 countries—a number that keeps growing thanks to our incredible

team. And we have no intention of slowing down. Are you the Application Security Engineer we're looking for?

As a Application Security Engineer at Sitoo, you will work closely with our CISO, Senior Security Engineer, and engineering teams

to support the secure development side of our platform. You will play a vital, hands-on role in securing our application code,

repositories, and dependencies. You will take direct ownership of our application-level vulnerability backlog across our GitHub

repositories, ensuring code fixes are triaged, released, and compliant with our SOC 2 SLA targets. By pairing a passion for

security with an eagerness to learn, you will help triage findings, maintain CI/CD security gates, and empower our developers to

safely leverage AI-assisted coding tools.

• Actively track, prioritize, and remediate application and dependency vulnerabilities (Dependabot, Aikido) across ~184 active

GitHub repositories to hit strict SOC 2 SLA targets.

• Collaborate closely with our Senior Cloud & Infrastructure Security Engineer to escalate complex code or architectural risks

while continuously growing your technical security expertise.

• Familiarity with at least one programming language (such as Python, Go, Ruby, or JavaScript/TypeScript) and a hands-on drive to

test PRs, update libraries, and fix build breakages.

• A proactive, problem-solving mindset with a genuine enthusiasm for clearing security technical debt and learning modern AppSec

practices.

• Interest in AI-assisted development and a basic awareness of AI-related code security risks (e.g., hallucinated packages,

unsafe generated patterns).

• Confident, clear communication skills to collaborate effectively across development teams and foster a culture of shared

security ownership.

We dare to dream big, we have the courage to keep raising the bar, and we’re committed to being a force for good in retail. We

believe in an inclusive culture where everyone feels a sense of belonging. We support each other, we win together, we celebrate

success together, and we overcome challenges together.

Today, we’re more than 120 dedicated experts with a positive and solution-oriented mindset. Most importantly, we take care of each

other, and we never forget to have fun.

We care just as much about our team as we do about pushing the boundaries of retail. To make sure you have the support, balance,

and energy to thrive, both in and out of the office, here is glimpse of what you get when you join us: