App Sec Engineer: Secure SDLC & DevSecOps

emagine; Lisboa; Híbrido; EUR 65 000 - 95 000; Tempo integral

Resumo da oferta

Emagine is seeking an Application Security Engineer to join a collaborative project environment in Portugal. The role targets professionals with a strong software development background who transitioned into Application Security to drive Secure SDLC practices and raise security maturity across development teams.

You will work with Software Engineers, Architects, DevOps, and Cybersecurity specialists to embed security across the software lifecycle, perform assessments, coordinate pen tests, and

Qualificações

• Bachelor's degree in Computer Science, Cybersecurity, Software Engineering, or a related field.
• Background in software development followed by Application Security responsibilities.
• Strong knowledge of Secure SDLC methodologies and secure coding practices.
• Experience with vulnerability assessment tools and secure coding standards.
• Professional level of English.

Responsabilidades

• Promote Secure SDLC practices across software development teams.
• Review architectures and participate in threat modelling activities.
• Analyse vulnerabilities from SAST, DAST, and pen tests and prioritize fixes.
• Assist development teams in remediating security issues and promoting secure coding.
• Coordinate penetration testing with external partners and verify remediation actions.
• Integrate security controls into CI/CD pipelines and support DevSecOps.
• Deliver secure coding workshops and create technical guidelines for champions.

Conhecimentos

Secure SDLC

Threat modelling

Vulnerability analysis

CI/CD security

English proficiency

Formação académica

Bachelor's degree in Computer Science, Cybersecurity, Software Engineering, or a related field

Ferramentas

OWASP Top 10

OWASP ASVS

Burp Suite

ZAP

SonarQube

Checkmarx

Fortify

Veracode

Snyk

Trivy

Dependabot

Descrição da oferta de emprego

Emagine is seeking an Application Security Engineer to join a collaborative project environment in Portugal. The role targets professionals with a strong software development background who transitioned into Application Security to drive Secure SDLC practices and raise security maturity across development teams.

You will work with Software Engineers, Architects, DevOps, and Cybersecurity specialists to embed security across the software lifecycle, perform assessments, coordinate pen tests, and