Application security engineer

La Fosse; Lisboa; Hybrid; EUR 50,000 - 70,000; Full time

Job summary

La Fosse is seeking an Application Security Engineer to join an engineering-led security function. You will embed security throughout the SDLC, building secure applications from the ground up in collaboration with software teams.

Responsibilities include conducting security reviews, threat modelling, SAST/DAST/SCA tooling, secure code reviews, and helping align security with CI/CD pipelines. Three days per week onsite in central Lisbon.

Qualifications

• Must have experience in Application Security, Product Security or Software Security Engineering.
• Should have a genuine software development background and be able to write/read code.
• Proficient with at least one programming language (Python/Go/Java/JavaScript/C++).

Responsibilities

• Collaborate with software teams to identify and fix application security risks.
• Review security of applications, APIs and architectures.
• Lead or contribute to threat modelling and secure design reviews.
• Implement and improve application security tooling (SAST/DAST/SCA).
• Perform secure code reviews and identify vulnerabilities in code.
• Support vulnerability assessment, prioritisation and remediation.
• Develop automation to improve application security and CI/CD processes.
• Promote secure coding practices across engineering teams.
• Help integrate security into CI/CD pipelines and workflows.

Skills

Software engineering background

Programming languages knowledge

OWASP Top 10

Tools

SAST

DAST

SCA

Job description

Описание

We are looking for Application Security Engineers to join an established engineering-led security function within a growing technology business. This is an opportunity to work closely with software engineering teams, embedding security throughout the software development lifecycle and helping build secure applications from the ground up.

Задачи

• Work closely with software engineering teams to identify and address application security risks.
• Conduct security reviews of applications, APIs and software architectures.
• Lead or contribute to threat modelling activities and secure design reviews.
• Implement and improve application security tooling, including SAST, DAST and SCA.
• Perform secure code reviews and help identify vulnerabilities within application code.
• Support vulnerability assessment, prioritisation and remediation.
• Develop automation and practical solutions to improve application security.
• Promote secure coding standards and best practices across engineering teams.
• Help integrate security into CI/CD pipelines and development workflows.

Требования

• Experience in Application Security, Product Security or Software Security Engineering.
• A genuine software engineering or development background, with the ability to write and understand code.
• Experience with one or more programming languages such as Python, Go, Java, JavaScript or C++.
• Strong understanding of secure coding practices and common application vulnerabilities, including OWASP Top 10.
• Experience with application security testing, such as SAST, DAST and SCA.
• Knowledge of threat modelling, secure architecture and code review.
• Experience working directly with software developers and engineering teams.
• Ownership of application security initiatives across multiple engineering teams.
• Experience defining application security strategy and technical standards.
• Strong technical expertise in secure software design and vulnerability remediation. Ability to influence engineering decisions and mentor other engineers.

Условия

Three days per week onsite in central Lisbon.