Security Engineer: Threat Modeling & Secure DevOps (Lisbon)

Air Apps; Madrid; On-site; EUR 61,000 - 76,000; Full time

Benefits offered by this job

Apple hardware ecosystem for work

Annual Bonus

Top-tier Health and Life Insurance

Transportation Budget

Coverflex benefits package

Childcare support

Air Conference

Pension Fund

Urban Sports Club

Meals 100% free at the hub

Job summary

Air Apps is seeking a Security Engineer to safeguard our AI-powered Personal & Entrepreneurial Resource Planner applications, infrastructure, and data. You will implement secure coding practices, run vulnerability scans, and model threats to keep systems resilient against cyber threats.

Based onsite in Lisbon, you will collaborate with development, DevOps, and IT teams, shaping a secure development lifecycle and proactive risk mitigation. Relocation support is available.

Qualifications

• 4+ years of experience in cybersecurity, app security, or security engineering.
• Knowledge of secure coding principles, OWASP Top 10, and threat modeling.
• Experience with vulnerability scanning tools (Nessus, Qualys, Burp Suite) and pen testing.
• Hands-on with SIEM, IDS, and security monitoring tools.
• Scripting/automation in Python, Bash, or PowerShell.
• Cloud security in AWS/Azure/GCP, including IAM.
• Knowledge of encryption, network security, and API security.
• Experience with DevSecOps and CI/CD security integration.
• Ability to analyze logs and detect anomalies.
• Excellent communication to explain security to non-tech stakeholders.

Responsibilities

• Develop threat modeling to identify security risks across applications and infrastructure.
• Conduct vulnerability scanning, penetration testing, and security assessments to detect weaknesses.
• Define and enforce secure coding practices in collaboration with development teams.
• Work with DevOps to integrate security into CI/CD pipelines and automate security testing.
• Monitor and respond to security incidents, conducting root cause analysis and implementing preventative measures.
• Ensure compliance with security standards and regulations (e.g., ISO 27001, GDPR, SOC 2).
• Design and implement identity and access management (IAM) policies, encryption standards, and authentication mechanisms.
• Collaborate with product teams to conduct security reviews of features, APIs, and third-party integrations.
• Develop incident response plans, security documentation, and best practices.
• Stay ahead of emerging threats, vulnerabilities, and security technologies.

Skills

Secure coding principles

Threat modeling

Python/Bash/PowerShell

Cloud security

Encryption & IAM

Security monitoring

DevSecOps

Security communication

Tools

Nessus

Qualys

Burp Suite

SIEM

IDS/IPS

CI/CD security tooling

Job description

Air Apps is seeking a Security Engineer to safeguard our AI-powered Personal & Entrepreneurial Resource Planner applications, infrastructure, and data. You will implement secure coding practices, run vulnerability scans, and model threats to keep systems resilient against cyber threats.

Based onsite in Lisbon, you will collaborate with development, DevOps, and IT teams, shaping a secure development lifecycle and proactive risk mitigation. Relocation support is available.