Application Security Engineer

Responsibilities

• Drive improvements to the product security posture through strategic planning and collaboration with development and infrastructure teams.
• Produce production-grade, web-scale application security designs.
• Review and produce data privacy and financial regulatory functional and nonfunctional designs.
• Perform design reviews, threat modeling, vulnerability assessments, security testing, and code reviews.
• Provide security and privacy expertise throughout the software development lifecycle.
• Partner with development teams on design, code reviews, and security education.
• Contribute to security strategy, security tooling selection, and creation of security tools.

Requirements

• Expertise with a programming language such as Python, Go, or Java.
• Experience with security in a DevOps environment and distributed systems at scale.
• Experience with web application penetration testing and security tooling.
• Coding experience automating or integrating security tools and creating security tools.
• Knowledge of cloud and container technologies such as AWS, GCP, Kubernetes, and Docker.
• Experience conducting security design reviews, threat modeling, and risk assessments.
• Knowledge of application security issues, including OWASP Top 10 vulnerabilities.
• Professional security qualifications such as CISSP, Offensive Security, or SANS Institute certifications are desirable.
• Contributions to the security community, such as public research, blogging, or presentations, are desirable.
• Awareness and experience with the Data Protection Act, ISO 27001, and PCI-DSS are desirable.

Benefits

• Voluntary pension plan with matching up to 5%.
• Private healthcare and comprehensive life insurance.
• 25 days of holiday plus public holidays.
• Two charity days per year.
• Daily meal allowance.
• Access to learning materials and courses.
• Subsidized sports and hobby clubs, snacks, smoothies, and drinks.
• Full-time permanent employment based in Lisbon, requiring four days per week onsite.
• Latest technology and an environment supporting learning and career progression.