Application Security Architect

Landing; Lisboa; On-site; EUR 70,000 - 110,000; Full time

Job summary

Damia seeks an Application Security specialist to evaluate security architectures and implement security controls for our clients' products. You will collaborate closely with developers, product managers, and other security teammates to design, review, and improve security processes, tooling, and documentation.

You will identify design gaps, assess architectures and code for vulnerabilities, and help prioritize remediation with engineering teams.

Qualifications

• 5+ years of application security hands-on experience.
• Experience performing security design reviews, threat modeling, and customizing solutions.
• Strong understanding of common security attacks and remediation.
• Hands-on experience with AI tools and AI-based security solutions.
• Experience performing security design reviews and security testing for AI systems, LLM-based applications, and AI agents.
• Experience with programming languages: Ruby, Scala, Python, JavaScript (Advantage).
• Ability to work well with developers and product management.
• Experience working in a large-scale SaaS environment (Advantage).
• Knowledge of microservice architecture, web technologies, and APIs (Advantage).
• Ability to explain complex security problems.
• Excellent problem-solving skills.
• Currently living in Portugal and legally authorized to work in the country.

Responsibilities

• Initiate and improve processes, tools, and documentation that will support application security requirements
• Identify security design gaps in existing and proposed architectures, services, and products
• Evaluate architecture, design, and code to identify and resolve potential vulnerabilities and security risks
• Work closely with development teams to prioritise and resolve application security issues and implement security best practices and frameworks.
• Assist in identifying and responding to security issues in the company's environment

Skills

Security

Job description

Description

About Damia

Damia is a specialist tech recruitment agency in Portugal, focused on technology, product, and engineering roles. We work with funded scaleups, international companies building teams in Portugal, and established tech organisations scaling critical hires.

Our approach is consultative, not transactional. Every mandate runs through a structured methodology, from strategic discovery and talent mapping to curated shortlists and post-hire follow-up, led by senior recruiters who understand the market and the roles they recruit for.

We are part of the Triveris Group ecosystem alongside We Are META and Landing.Jobs, giving us reach across the full spectrum of tech talent in Portugal.

Damia supports its clients with direct hires.

About the role: The Application Security team ensures the security of the company's products. In this role, you will evaluate security architecture, design and implement technology, processes, and procedures by collaborating closely with developers, product managers, and other members of the security team.

Responsibilities

• Initiate and improve processes, tools, and documentation that will support application security requirements


• Identify security design gaps in existing and proposed architectures, services, and products


• Evaluate architecture, design, and code to identify and resolve potential vulnerabilities and security risks


• Work closely with development teams to prioritise and resolve application security issues and implement security best practices and frameworks.


• Assist in identifying and responding to security issues in the company's environment

Requirements

• 5+ years of application security hands-on experience


• Experience performing security design and code reviews, threat modeling, and customizing application security solutions


• Strong understanding of common security attacks and their remediation


• Hands-on experience with AI tools and AI-based security solutions


• Experience performing security design reviews and security testing for AI systems, LLM-based applications, and AI agents


• Experience with programming languages: Ruby, Scala, Python, JavaScript, etc. (Advantage)


• Ability to work well with developers and product management


• Experience working in a large-scale SaaS environment (Advantage)


• Knowledge of microservice architecture, web technologies, and APIs (Advantage)


• Ability to explain complex security problems


• Excellent problem-solving skills


• Currently living in Portugal and legally authorized to work in the country

Skills

Required: Security