Application Security Architect MI-DA

Kuehne + Nagel AS; Porto; Híbrido; EUR 50 000 - 70 000; Tempo integral

Resumo da oferta

Kuehne + Nagel is seeking an Application Security Architect to join their internal AppSec team, driving security advancements in product design and development. This role offers an opportunity to impact logistics on a global scale, enhancing security frameworks and mentoring fellow engineers while collaborating in an international environment. Flexible work arrangements and a growth-oriented culture are part of the package.

Serviços

Flexible working hours

Ability to work remotely

Supplemental health insurance

Employee Assistant Program

Tailor-made career planning

Qualificações

• 5+ years of experience in Application Security and Security Architecture.
• Deep understanding of secure software & cloud architecture and threat modeling methodologies.
• Solid hands-on experience in Java and/or Python.

Responsabilidades

• Partner with product teams to embed security into the software development lifecycle.
• Lead threat modeling sessions and identify risks across services and platforms.
• Mentor junior AppSec engineers and contribute to the growth of the internal AppSec team.

Conhecimentos

Application Security

Security Architecture

Threat Modeling

Collaboration

Communication

Ferramentas

SAST

SCA

Descrição da oferta de emprego

It's more than a job

In this IT role, you will drive the advancement of mission-critical products, e-solutions, and digital services that support Kuehne+Nagel’s global logistics strategy. Your contributions will directly impact how goods move across the world—whether it’s life-saving medical supplies or everyday essentials. Working in IT at Kuehne+Nagel contributes to more than we imagine. Join our diverse and international team, and be part of a digital journey that transforms supply chains and connects people, businesses, and communities worldwide.

As an Application Security Architect, you will be a key member of our internal AppSec team, working closely with product teams, InfoSec, and other stakeholders to ensure secure product design and development. You will lead threat modeling activities, define security requirements, support secure software development lifecycle (SSDLC) integration, and actively contribute to our global application security strategy. This role is ideal for someone with a strong AppSec background who enjoys building strong partnerships across teams, mentoring others, and driving meaningful security improvements at scale. Sounds like a perfect next step in your career. Read on!

How you create impact

• You partner with product teams across the entire development lifecycle to embed security into the software development process and strengthening security of product architectures.
• You champion security initiatives, define and promote security requirements for products and services throughout the development lifecycle.
• You conduct and lead threat modeling sessions, security design reviews, and identify risk across services and platforms.
• You help define and evolve our global AppSec strategy, contribute policies, processes, best practices, roadmaps, and KPIs
• You support the development and rollout of a security champions program to build security awareness and capabilities within our product engineering.
• You organize and conduct workshops, trainings, and knowledge-sharing sessions for developers and other technical stakeholders.
• You mentor (junior) AppSec engineers and actively contribute to the growth and development of our internal AppSec team.
• You collaborate on the evaluation and implementation of new AppSec tools and services.
• You stay up-to-date on the latest threats, vulnerabilities, and mitigations across various tech stacks.

What we would like you to bring

• 5+ years of experience in Application Security and Security Architecture.
• Deep understanding of secure software & cloud architecture, common design patterns, and threat modeling methodologies such as STRIDE.
• Proven expertise in secure software development lifecycle (SSDLC) practices, including the integration of security controls into modern CI/CD pipelines.
• Solid hands-on experience in modern software development, ideally in enterprise environments, and with Java and/or Python.
• Familiarity with a range of application security tools, including SAST, SCA, and container security solutions.
• Experience in organizing security-related events such as CTFs and developer trainings is a strong plus.
• Exposure to Gen AI in a security context is a plus.
• A collaborative mindset – you enjoy working with international, cross-functional teams and driving alignment across stakeholders.
• Excellent communication skills with fluency in English, both written and verbal.

What's in it for you

Our work will have a direct influence on the future of logistics and IT. Our teams are experts who are helping shape the IT industry in Portugal and around the world. We want you to feel comfortable in our working environment, where you will be dealing with different cultures. And as such, we offer flexible working hours and the ability to work remotely. We value teamwork, continuous learning and diversity. + Nagel offers you a tailor-made career - through individual planning and team leaders who support and advise you in every way. Personally, you will be supported by many work-life balance offers, supplemental health insurance and our EAP - Employee Assistant Program.

Who are we

Logistics shapes everyday life - from the goods we consume to the healthcare we rely on. At Kuehne+Nagel, your work goes beyond logistics; it enables both ordinary and special moments in the lives of people around the world.

As a global leader with a strong heritage and a vision to move the world forward, we offer a safe, stable environment where your career can make a real difference. Whether we help deliver life-saving medicines, develop sustainable transportation solutions or support our local communities, your career will contribute to more than you can imagine.