Application security engineer

Smart Consulting; Lisboa; Vor Ort; EUR 70.000 - 90.000; Vollzeit

Zusammenfassung

Smart Consulting in Lisbon, Portugal is seeking an experienced Application Security Engineer to join an international team. You will help define and implement security initiatives, support development teams in remediating vulnerabilities, and embed security into the software development lifecycle.

You will lead security strategies, integrate tools into CI/CD, mentor colleagues, and monitor KPIs while continuously advancing secure practices across the organization.

Qualifikationen

• At least 3 years of experience in Application Security, Cybersecurity or DevSecOps.
• Practical knowledge of SAST, DAST, SCA, container scanning, IaC scanning and secrets detection.
• Experience integrating security tools into CI/CD pipelines.
• Knowledge of OWASP Top 10 and vulnerability management.

Aufgaben

• Define and drive Application Security strategies, initiatives and roadmaps.
• Improve and maintain the Secure Software Development Lifecycle (S-SDLC).
• Support development teams in identifying, analysing and remediating security vulnerabilities.
• Implement and integrate security tools into CI/CD pipelines.
• Promote security best practices through workshops, training sessions and technical documentation.
• Mentor and support team members, encouraging a strong security culture.
• Monitor security performance through KPIs, KRIs and OKRs.
• Explore emerging technologies and contribute to PoCs.

Kenntnisse

Strong communication

Team collaboration

Ausbildung

Master's degree or Bac+5

Tools

SAST

DAST

SCA

Container scanning

IaC scanning

Secrets detection

Jobbeschreibung

Описание:

We are looking for an experienced Application Security Engineer to join an international team focused on strengthening application security and improving security practices across the software development lifecycle. In this role, you will help define and implement Application Security initiatives, support development teams in identifying and addressing vulnerabilities, and contribute to embedding security into development processes.

Задачи:

• Define and drive Application Security strategies, initiatives and roadmaps.
• Improve and maintain the Secure Software Development Lifecycle (S-SDLC).
• Support development teams in identifying, analysing and remediating security vulnerabilities.
• Implement and integrate security tools into CI/CD pipelines.
• Promote security best practices through workshops, training sessions and technical documentation.
• Mentor and support team members, encouraging a strong security culture.
• Monitor security performance through KPIs, KRIs and OKRs.
• Explore emerging technologies and contribute to Proofs of Concept (PoCs).

Требования:

• At least 3 years of experience in Application Security, Cybersecurity or DevSecOps.
• Practical experience with application security tools and techniques, including SAST, DAST, SCA, container scanning, IaC scanning and secrets detection.
• Experience integrating security tools into CI/CD pipelines.
• Knowledge of OWASP Top 10 and application vulnerability management.
• Programming knowledge in Python, C++, C# or other programming languages.
• Understanding of cloud security environments.
• Experience leading or coordinating Application Security initiatives.
• Strong communication skills and ability to collaborate with development teams.
• Master's degree or equivalent (Bac+5).
• Fluent English is mandatory
• Будет плюсом: French is a plus

Условия:

• Opportunity to work in an international environment.
• Participation in strategic Application Security initiatives.
• A collaborative environment focused on continuous improvement and knowledge sharing.