A strong entry point into application security for someone with a developer's instinct and a security mindset. You own the application-level vulnerability backlog across a large GitHub estate — triaging, fixing and shipping security updates — while learning modern AppSec alongside a senior security team. Ideal for a developer moving into security or a junior security engineer who wants hands-on AppSec at scale.
What you'll do
- Track, prioritise and remediate application and dependency vulnerabilities (e.g. Dependabot, Aikido) across a large multi-repository estate
- Assist development teams with code-level security fixes across npm / pnpm, Go, Python, Ruby, Dockerfiles and GitHub Actions
- Investigate and resolve breaking dependency upgrades, CI failures and build issues from security updates
- Track merged security fixes through the release lifecycle to validated production deployment
- Maintain and improve CI/CD security gates, automated scanning and repository security workflows
- Help define and monitor guardrails for the safe use of AI-assisted development tools
Must have
- Foundational application-security knowledge — secure coding, OWASP Top 10
- Familiarity with at least one language: Python, Go, Ruby or JavaScript / TypeScript
- Comfort with GitHub, version control and CI/CD basics
- A proactive, debug-it-yourself mindset and drive to clear security technical debt
- Willingness to test PRs, update libraries and fix build breakages hands-on
- Professional English, verbal and written
Nice to have
- Interest in AI-assisted development and awareness of AI-related code-security risks
- Personal projects, coursework or internships involving security tooling or dependency management
- Exposure to secure SDLC practices
Apply for this role
Or email your CV to careers@luminovalabs.net and include the reference AS02 in the subject.