Junior Application Security Engineer

The Cybersecurity team supports Toyota's digital transformation across Europe by strengthening security in a modern enterprise environment and protecting critical digital assets. The team fosters a collaborative, respectful, and inclusive environment for people with diverse backgrounds and perspectives to thrive and grow.

• Experience gained through work, internships, academic projects, community involvement, self-directed learning, or personal projects in Application Security, Secure Software Development, Software Engineering, or related areas
• Understanding of the software development lifecycle and interest in secure development practices
• Relevant knowledge from development, engineering, computer science, cybersecurity, or comparable technical backgrounds
• Awareness of common application security vulnerabilities and interest in identifying and addressing them
• Awareness of threat modelling concepts and interest in applying them in practice
• Experience with programming from academic work, bootcamps, personal projects, internships, or professional roles
• Exposure to secure development practices, code review, or security testing via coursework, projects, internships, or early professional experience
• Ability to explain technical concepts clearly and willingness to learn from feedback
• Collaborative mindset and ability to work effectively with developers, security colleagues, and other stakeholders
• Strong curiosity, constructive and collaborative approach, and motivation to develop technical and professional skills

Nice to have:

• Awareness of frameworks such as OWASP SAMM, BSIMM, or NIST SSDF
• Exposure to cloud platforms, containers, or Kubernetes security through study, labs, projects, or practical experience
• Entry-level or foundational certifications such as Security+, ISC2 CC, or equivalent

• Support the integration of security practices into development pipelines, including SAST/DAST and CI/CD security controls
• Help promote secure-by-design principles and shift-left engineering practices across teams
• Assist in threat modelling activities for applications and projects, helping document risks and mitigation actions
• Support teams in identifying, tracking, and remediating vulnerabilities
• Partner with developers and project teams to provide practical application security support
• Help translate technical security findings into clear and actionable guidance
• Contribute to security awareness and secure coding initiatives within engineering teams
• Learn from and collaborate with security experts and cross-functional teams to share best practices
• Support the creation and maintenance of documentation, guidelines, and reusable security assets
• Contribute to tracking application security improvements and reporting activities