Security Engineer - Onsite in Lisbon (Relocation Support)

Air Apps; Zürich; On-site; CHF 66,000 - 85,000; Full time

Benefits offered by this job

Apple hardware ecosystem for work.

Annual Bonus

Top-tier Health and Life Insurance

Transportation Budget

Coverflex benefits package for meal,  

Childcare support

Air Conference

Pension Fund

Urban Sports Club

Meals 100% free

Job summary

Air Apps, Lisbon-based, is seeking a Security Engineer to safeguard applications, infrastructure and data from threats. You will work with product, DevOps and IT to implement secure coding, vulnerability scanning and threat modeling to keep systems resilient.

This onsite role collaborates with cross-functional teams in a fast-paced environment. You will build SDLC security, IAM, encryption, and CI/CD security, while staying ahead of threats and ensuring compliance (ISO 27001, GDPR, SOC 2).

Qualifications

• 4+ years in cybersecurity, application security, or security engineering.
• Strong knowledge of secure coding principles and OWASP Top 10.
• Experience with vulnerability scanning tools and penetration testing methods.
• Hands-on experience with security monitoring tools and SIEM.
• Proficiency in scripting (Python, Bash, PowerShell).
• Familiarity with AWS, Azure or GCP, and IAM.
• Knowledge of encryption, network security, and API security.
• Experience with DevSecOps and CI/CD security.
• Ability to analyze security logs and mitigate threats.
• Excellent communication of security concepts to non-technical stakeholders.

Responsibilities

• Develop threat modeling to identify security risks across apps and infrastructure.
• Conduct vulnerability scanning, penetration testing, and security assessments.
• Define and enforce secure coding practices with development teams.
• Integrate security into CI/CD pipelines and automate tests.
• Monitor security incidents, perform root-cause analysis, and implement mitigations.
• Ensure compliance with ISO 27001, GDPR, SOC 2 and other standards.
• Design IAM policies, encryption standards, and authentication mechanisms.
• Collaborate on security reviews of features, APIs, and third-party integrations.
• Develop incident response plans and security documentation.

Skills

Cybersecurity

Application security

Threat modeling

Scripting

Cloud security

Tools

Nessus

Qualys

Burp Suite

SIEM

IDS

Cloud security tools

Job description

Air Apps, Lisbon-based, is seeking a Security Engineer to safeguard applications, infrastructure and data from threats. You will work with product, DevOps and IT to implement secure coding, vulnerability scanning and threat modeling to keep systems resilient.

This onsite role collaborates with cross-functional teams in a fast-paced environment. You will build SDLC security, IAM, encryption, and CI/CD security, while staying ahead of threats and ensuring compliance (ISO 27001, GDPR, SOC 2).