Cairo, Cairo, Egypt · Hybrid
Job Purpose As an Application Security Engineer at Luciq, you will help shape and build our application security program alongside the wider team. This is a hands-on, high-ownership role where you will work closely with …
Skills: Application Security, Secure Code Review, Threat Modeling, Vulnerability Management, CI/CD Security
Sign up with Clera and we'll reach out the moment a role actually fits you — no more spraying applications into the void.
The role involves leading threat modeling, conducting secure code reviews, and managing vulnerabilities across web applications, APIs, and mobile SDKs. Additionally, the engineer will build automated security testing in CI/CD pipelines and maintain AWS cloud security visibility.
Candidates need 3-6 years of experience in application security with proficiency in Python, Ruby, or Go and a deep understanding of OWASP patterns. Practical experience with STRIDE threat modeling and integrating security tools into CI/CD pipelines is required.
Job Purpose
As an Application Security Engineer at Luciq, you will help shape and build our application security program alongside the wider team. This is a hands-on, high-ownership role where you will work closely with product and development teams across the full software development lifecycle — reviewing designs before code is written, identifying risks as features take shape, and ensuring security is embedded into how we build and ship software, not bolted on after the fact. Our stack runs on Ruby on Rails, Go, and Python, deployed on AWS with Terraform managing infrastructure as code and Jenkins powering CI/CD. You will read and review code in these languages — not just rely on scanner output — and work with AWS security services (SecurityHub, Inspector, GuardDuty, CloudTrail, CloudFront) to provide visibility and protection across our infrastructure. The role spans web applications, APIs, our mobile SDK (iOS and Android), cloud, and CI/CD — partnering with engineers, PMs, Platform, and the Security team to make the secure path the default path. This role can be filled at mid-level with a clear growth path to senior-level as you grow into shaping our application security program, or at senior-level if you're already operating at that scope.
You will join a lean Security team, which entails stepping beyond core AppSec for incident triage, addressing customer security questionnaires, or supporting cross-functional cloud and compliance reviews. We value this variety as a core facet of the role; if you are seeking hyper-specialized work restricted strictly to application security, this may not be the right fit.
Job Responsibilities
Job Requirements
Must-Haves
Strong Plus
We expect strong candidates to have some of these not all. The more, the better.
Nice to Have
Luciq is the Agentic Observability Platform for Mobile. Our intelligent AI agents detect, prioritize, and resolve issues across the app lifecycle, empowering teams to ship faster, deliver frustration-free sessions, and focus on building what matters.
Offices: San Francisco, CA, US · Cairo, EG
Luciq is the Agentic Observability Platform for Mobile. Our intelligent AI agents detect, prioritize, and resolve issues across the app lifecycle, empowering teams to ship faster, deliver frustration-free sessions, and focus on building what matters.
Offices: San Francisco, CA, US · Cairo, EG
