Job Description

We are Looking for AppSec security test engineer role: (An AppSec expert with hands-on experience in Application API Pen Testing and Third party (OSS) Lib management for a cloud native tech application to identify and mitigate security vulnerabilities in web, enterprise applications who wants to be part of Tieto Banktech. Tieto Banktech powers some of the Nordics’ most trusted banking systems with secure, reliable, and scalable solutions. Using automation, data, AI, and cloud, supported by hands-on guidance, we help banks modernize their core, strengthen trust, and deliver greater impact across the banking experience.

This role is in the Payments and Cash Management unit, where we work on cutting-edge technology to create world class financial products that are used by top banks worldwide.

Key Responsibilities

• Perform manual and automated security testing on web, mobile, and APIs.

• Conduct Vulnerability Assessment and Penetration Testing (VAPT) on applications.

• Identify, analyze, and document vulnerabilities such as OWASP Top 10 risks.

• Collaborate with development teams to remediate security issues and implement fixes.

• Perform secure code reviews and recommend security best practices.

• Integrate security testing into CI/CD pipelines (DevSecOps).

• Develop and maintain security test cases, scripts, and reports.

• Conduct threat modeling and risk assessments.

• Stay updated with latest security threats, tools, and techniques.

• Ensure compliance with security standards (e.g., ISO 27001, PCI-DSS, GDPR where applicable)

• Leverage AI-powered tools to perform automated code reviews, vulnerability scanning, and threat modeling, improving accuracy and speed of application security assessments.
• Integrate AI-driven security solutions (e.g., SAST/DAST, anomaly detection) into CI/CD pipelines to proactively detect and remediate vulnerabilities.
• Continuously upskill in AI and cybersecurity advancements to strengthen application defense strategies and drive intelligent, data-driven security decision

Technical Skills

3+ Years Exprience

• Strong knowledge of application security concepts and standards (OWASP, SANS).

• Experience with tools like: Kali Linux

• Application & API Penetration Testing using Burp Suite
• OWASP Guidelines & Security Best Practices
• CVE Management & Vulnerability Remediation
• AI-powered Security Solutions

• Burp Suite /OWASP ZAP

• openText SCA /FOD

• Knowledge of web technologies (HTTP/HTTPS, REST APIs, JSON, XML).

• Familiarity with programming/scripting languages (Python, Java, JavaScript, etc.).

• Understanding of authentication, authorization, encryption, and session management.

• Experience with API security testing.

We offer

We offer you professional growth, meaningful projects, open culture and an outstanding work-life balance! We offer you an opportunity to create the future of a growing, fast-developing and important sector. We believe that our organizational culture is an important part of enabling you to be successful. We provide a flexible hybrid work model as part of our culture and way of working. Finally, we also believe in curiosity and learning as a lifestyle where you need to unlearn and relearn every day as new possibilities emerge.

Additional Information

At Tieto, we believe in the power of diversity, equity, and inclusion. We encourage applicants of all backgrounds, genders (m/f/d), and walks of life to join our team, as we believe that this fosters an inspiring workplace and fuels innovation. Our commitment to openness, trust, and diversity is at the heart of our mission to create digital futures that benefit businesses, societies, and humanity.
Diversity, equity and inclusion | Sustainability | Tieto

Stay alert to recruitment scams:

• Tieto only communicates via @tieto.com email addresses.

• We never ask candidates to pay fees or share financial details during recruitment.

• If you receive a suspicious message claiming to be from Tieto, don't respond — verify it via our official careers site.

• For more information visit Important Advisory Regarding Recruitment Fraud | Tieto Blog