Application Security (Appsec) Engineer

Uncover; Lisboa; Híbrido; EUR 60 000 - 90 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Flexible hours

Remote work 52 days/yr

22 days paid annual leave

Health insurance (including dental)

Resumo da oferta

A Joom Group está a contratar um Engenheiro(a) de Segurança de Aplicações para a equipa de infraestrutura. O foco é assegurar a segurança de aplicações web e móveis, colaborar no desenvolvimento seguro e mitigar vulnerabilidades.

O candidato ideal possui experiência em SSDLC, testes de caixa branca e certificações de segurança. O papel envolve colaboração com equipas internacionais e oportunidades para promover melhorias de segurança em produtos, com opções de teletrabalho conforme política

Qualificações

• 3+ anos de experiência em segurança de aplicações web/móvel.
• Experiência em assegurar aplicações web e móveis.
• Experiência em construir processos de desenvolvimento seguros (SSDLC).
• Experiência com testes de caixa branca.
• Conhecimento de sistemas *NIX e protocolos de rede básicos.
• Preferência por experiência em programas de bug bounty.
• Certificações de segurança da informação (OSCP, CompTIA Security+).
• Autoria de CVEs.
• Proficiência em Go, Python ou Java.

Responsabilidades

• Implementar SSDLC com a equipa de desenvolvimento.
• Analisar a segurança dos produtos da empresa.
• Auxiliar equipas a tratar vulnerabilidades.
• Manter-se informado sobre ameaças atuais e desenvolver proteções de código.

Conhecimentos

Web/mobile security

SSDLC

White box testing

UNIX-like systems & networking basics

Bug bounty experience

CVE authorship

Programming Go/Python/Java

Formação académica

Certificações de segurança da informação (OSCP, CompTIA Security+)

Ferramentas

Go

Python

Java

Descrição da oferta de emprego

Descrição do cargo

Joom Group is an international tech-centric group of e-commerce companies founded in 2016 in Latvia. We are here to transform the largest industry in the world, global trade, making it more transparent, efficient, and technology-driven.

Today, Joom Group brings together the following businesses: Joom, a platform for shopping from all over the world;
JoomPro, the first end-to-end cross-border B2B marketplace, with successful operations in Brazil and plans to expand to other markets;
JoomPulse, data platform that provides analytics and recommendations for marketplace sellers;
and Onfy, a pharmaceutical marketplace in Germany. Joom Group's offices are located in China, Brazil, Portugal, Latvia, and Germany, with headquarters in Lisbon, Portugal.

We work as one international team, sharing knowledge and collaborating across countries, businesses, and products. As we continue to grow and introduce new products and services, we become increasingly susceptible to security threats. We are currently seeking an Application Security Engineer for our infrastructure team to stay informed about current threats and ensure the security of our development and applications.

This role offers the opportunity to develop the application security direction from the ground up and achieve international certification. We prioritize innovation over bureaucracy and legacy code and are always open to fresh ideas.

Responsibilities

• Implement SSDLC with the development team
• Analyze the security of the company's products
• Assist teams in addressing vulnerabilities
• Stay informed about current threats and develop code protections

Requirements

• 3+ years of experience in web/mobile application security
• Experience in securing mobile and web applications
• Experience in building secure development processes (SSDLC)
• Experience with white box testing
• Knowledge of *NIX systems and basic network protocols
• Preferred Experience in bug bounty programs
• Relevant information security certifications (e.G., OSCP, CompTIA Security+)
• CVE authorship
• Proficiency in Go, Python, or Java

Compensation and Benefits

• Compensation package: base salary and performance-based bonuses.
• Office-first: flexible hours with a possibility to work remotely 52 days per year, and 22 days of paid annual leave
• Care & Wellbeing: health insurance (including dental care) for employees and their children, daily meal allowance, and 100% paid sick leave
• AI-first approach: licenses and access to a wide range of AI tools
• Team & Growth: collaboration with colleagues across Portugal, Brazil, Latvia and China, with opportunities for promotions, professional trainings, and English courses
• Community & Engagement: annual team building activities, knowledge-sharing workshops, and a strong sense of team work