Application Security Engineer

📋 Description

• Drive application security initiatives across the SDLC.
• Identify, assess, remediate vulnerabilities.
• Promote secure coding and security-by-design principles.
• Integrate security testing into CI/CD pipelines.
• Review source code and provide security recommendations.
• Support secure design reviews and threat modeling.

🎯 Requirements

• Minimum 4 years in Application Security or related role.
• Strong knowledge: OWASP Top 10, CWE, secure design, web/API remediation.
• Experience with SAST, DAST, SCA tools (Snyk, Semgrep, Checkmarx, SonarQube, OWASP ZAP, Trivy).
• Experience integrating automated security into CI/CD (Jenkins, GitHub Actions, GitLab CI).
• Hands-on with programming in Java, Python, or Go.
• Cloud security concepts (AWS/Azure/GCP): IAM, Security Groups, VPCs, risk awareness.

🎁 Benefits

• Hybrid work arrangement in Lisbon area.
• Collaborative, cloud-native environment.
• Professional development opportunities.
• Exposure to FinTech security programs.