AppSec Engineer: Secure DevOps & Tooling Leader

Adecco (Portugal); Warszawa; Hybrid; PLN 180,000 - 280,000; Full time

Benefits offered by this job

Hybrid in Warsaw

Job summary

Adecco (Portugal) is seeking an Application Security Engineer to drive the strategy, implementation, and maturity of the application security program. The role leads secure SDLC initiatives, integrates AppSec tooling into engineering workflows, and partners with security, DevOps, and engineering leadership to scale security across product teams.

The ideal candidate has 5–10 years in AppSec, strong CI/CD experience, and hands-on tooling knowledge (Semgrep, Mend, GitHub Advanced Security, HCL

Qualifications

• Proven experience leading application security programs in CI/CD environments.
• Strong ability to drive security adoption across multiple teams.
• Hands-on with modern AppSec tooling and cloud-native apps.

Responsibilities

• Participate application security program with policy enforcement and risk reporting.
• Own integration of AppSec tooling into CI/CD pipelines for scalable security.
• Deploy and tune SAST, SCA, secrets, IaC, and DAST tooling (Ten able Web App Scanning).
• Partner with product teams to embed secure coding practices and review threat models.
• Collaborate with GRC/compliance to align with standards (OWASP, FedRAMP).
• Mentor AppSec engineers and promote a security-first culture.
• Evaluate IAST and runtime protections for continuous improvement.
• Develop KPIs to measure security posture and tooling efficacy.

Skills

CI/CD integration

Secure SDLC

Security strategy

Mentoring

Cross-team influence

Tools

Semgrep

Mend

GitHub Advanced Security

HCL AppScan

Tenable Web App Scanning

Job description

Adecco (Portugal) is seeking an Application Security Engineer to drive the strategy, implementation, and maturity of the application security program. The role leads secure SDLC initiatives, integrates AppSec tooling into engineering workflows, and partners with security, DevOps, and engineering leadership to scale security across product teams.

The ideal candidate has 5–10 years in AppSec, strong CI/CD experience, and hands-on tooling knowledge (Semgrep, Mend, GitHub Advanced Security, HCL