ecosio is a fast-growing, innovative service company and a leading provider of B2B integration, specialising in electronic data interchange (EDI), Web EDI and e-invoicing. ecosio is part of Vertex, Inc., a leading global provider of indirect tax solutions listed on Nasdaq (VERX). 

Our brand slogan is Connections That Work as we believe strong connections are central to successful business relationships - both external and internal. At ecosio, we hire individuals from all backgrounds and are committed to creating an inclusive work environment. We are technology lovers, set the highest standards for our solutions, and put innovative ideas first.

Are you passionate about working directly with the customers on the technical implementation and integration of our solution?

You'll connect with the role if you enjoy...

• optimising e-invoicing and global supply chains by planning, coordinating and technically implementing e-invoicing and EDI projects on our cloud platform
• communicating worldwide with our partner companies, customers and their suppliers
• acting as the interface between our customers, their ERP System and our SaaS platform
• taking on new customers (after handover from Sales) and independently progressing your integration projects
• appearing as a sparring partner for our customers and solving their technical issues
• performing proactively to ensure each project’s success
• coordinating mappings for e-invoicing and EDI integration with the document engineering team for your integration projects
• encouraging the evaluation and implementation of new tools and processes for the project and managing the process

To connect with ecosio it is important to have…

• several years of work experience in e-invoicing and/or EDI
• experience with the integration of ERP import and export interfaces based on XML, CSV and IDocs
• experience with EDI onboardings, EDI service providers and Value Added Networks (VANs)
• experience with national e-invoicing mandates around the globe
• in-depth knowledge of typical EDI and integration formats like XML, EDIFACT, ANSI X12, and VDA as well as EDI protocols like AS2, OFTP2 or PEPPOL
• excellent communication skills in English and German
• know-how in project management, supply chain management and/or logistics
• strong organisational skills and enjoy working independently

By connecting with us you will experience...

• Our remote-first culture lets you work remotely from one of our designated countries
• Flexible working hours to suit your schedule and priorities
• Annual personal development budget to invest in conferences, courses, or career coaching
• Home office allowance to create a workspace that fits your needs
• Regular events and trips to connect, celebrate, and have fun with the team
• Workations of up to 90 days per year within the EU, combining travel and productivity
• Wellbeing support, including mental health resources and employee assistance programs
• Additional country-specific benefits based on your location

Sounds like a connection that works? Then apply now and we will get in touch soon!

As part of our hiring process at ecosio, we conduct standard background checks. You can find more information about them by clicking HERE.

Our mission is to build Connections That Work by fostering a diverse and inclusive team. We are committed to making everyone feel valued and empowered to contribute their unique skills, experiences and perspectives. And now we want to connect with you. 

According to the Austrian collective agreement, the minimum salary is 54.000 €/year. Of course, we are happy to offer much higher compensation based on qualifications and experience!

THE ROLE 

The Senior Application Security Engineer is a key member of Cognism’s Information Security Team, reporting into the Application & Infrastructure Security Manager. Your mission is to embed security by design across our engineering and product organization by integrating modern application security practices throughout the full development lifecycle. We focus on building secure, scalable, and resilient systems while enabling the business to innovate quickly and safely. It is to drive a culture where the fastest path for our engineers is the securest path. 

You will work closely with Product, Engineering, Architecture, and Data teams to understand risks within our platform, including risks introduced by AI powered features, and ensure the right controls, guardrails, and security patterns are built into the product at its inception – all the while ensuring a balanced approach to the product experience that our thousands of large global enterprise customers use every day. 

This role is ideal for a senior IC who is technical, collaborative, and pragmatic, with the ability to influence engineering teams while driving hands on improvements to Cognism’s secure SDLC. 

KEY RESPONSIBILITIES 

Security by Design & Product Integration 

• Partner with Product, Web and Data Engineering teams from the ideation stage to ensure security requirements are considered early in feature and model design.
• Translate product and application risks into actionable security controls, making recommendations repeatable to build guardrails and guidance that product, design, and engineering teams can apply as they scale and build the products in the teams they own.
• Help shape security acceptance criteria and guide engineering teams during design reviews and backlog planning. 

Application Risk Assessment & AI Security 

• Identify and assess application risks across Cognism’s SaaS platform, data processing pipelines, including emerging risks associated with AI/ML capabilities.
• Contribute to AI feature reviews and participate in AI risk assessments to ensure responsible and secure use of models, in a way that balances the need to innovate and challenge the status quo in AI implementation.
• Assess and pragmatically recommend mitigations for security risks in data pipelines, model-training workflows, feature stores, and ML systems, ensuring strong controls for data access, data lineage, model integrity, and protection of sensitive datasets. 

Secure SDLC & DevSecOps Enablement 

• Partner with our engineering and platform team to embed security guardrails into our software development lifecycle and agile engineering workflows.
• Partner with engineering teams to integrate and optimize security tooling into CI/CD pipelines (SAST, SCA, DAST, container scanning, IaC scanning).
• Drive automation and developer-friendly security processes that minimize friction and support rapid delivery. 

Threat Modelling & Architecture Support 

• Conduct and facilitate a self-serve, risk-driven approach to pragmatic threat modelling sessions for new features, services, and AI components.
• Conduct threat modelling for data architectures, including ingestion, transformation, storage, streaming, and ML model deployment patterns, ensuring data confidentiality, integrity, and responsible use.
• Provide hands-on application security guidance to engineering teams, helping them implement secure APIs, microservices, data flows, and integrations.
• Maintain and expand Cognism’s secure coding standards, guidance, and reusable security patterns. 

Application Security Testing & Engineering 

• Perform hands-on security testing (manual and automated) for web applications, microservices, APIs, and cloud components.
• Plan, coordinate, and oversee penetration tests, red team exercises, and third-party security assessments, ensuring findings are addressed and tracked.
• Validate findings, assist with prioritization, and partner with engineering teams on remediation strategies. 

Collaboration, Education & Influence 

• Work directly with product squads, acting as a trusted advisor and embedded security partner. Take the time to understand what other teams are working on, what business priorities are, and partner with teams to recommend risk mitigations that balance risk with opportunity and that take into account the threat landscape. 
• Deliver security training, workshops, and guidance to improve engineering teams’ security maturity.Communicate security risk and tradeoffs clearly and constructively to technical and nontechnical stakeholders. 

CORE COMPETENCIES 

• Strong technical depth in application security, cloud security, and secure development.
• Understanding of modern data stack components (e.g., data pipelines, feature stores) and the ability to collaborate effectively with data practitioners.
• Deep understanding of communication protocols used for web development is a must-have.
• Hands on experience with web application development, specifically for back-end development is a must-have competency. 
• Risk-Based Prioritization: Ability to distinguish between theoretical security risks and actual business threats, demonstrating a "risk-driven" rather than "compliance-driven" mindset. Comfortable balancing security risk with product and commercial realities.
• Contextual Communication: Capacity to translate complex technical vulnerabilities into business-impact stories that resonate with non-technical stakeholders and product owners. 
• Collaborative Conflict Resolution: Proven track record of approaching engineering friction with transparency and pragmatism, balancing a firm stance on security with a deep care for the developer experience. Pragmatic problem solver with a growth mindset and bias toward action.
• Architectural Empathy: Ability to put yourself in the position of your users (the engineers) to build security guardrails that are repeatable and embedded into existing workflows rather than added as hurdles. 

EDUCATION & EXPERIENCE 

• 5–10+ years of experience in Application Security, Product Security, or Security Engineering roles.
• Strong experience securing cloud native SaaS platforms (AWS preferred) and Data pipelines. 
• Handson experience with secure coding, application testing, and CI/CD security automation.
• Experience working closely with engineering and product teams in agile environments.
• Familiarity with security frameworks such as OWASP ASVS, OWASP Top 10, NIST, ISO 27001/2.
• Experience evaluating and securing AI/ML enabled features is a strong advantage.
• Experience in SME or high-growth SaaS environments preferred.