application security engineer

Shore; Lisboa; On-site; EUR 45,000 - 65,000; Full time

Job summary

Enfint ищет специалиста по безопасности приложений для работы в IT Risk Management. Вы будете поддерживать и развивать Secure SDLC, давать технические рекомендации командам разработчикам по безопасному кодированию и устранению уязвимостей, проводить анализ и remediation.

Необходимо магистратура в смежной области, 3+ года опыта в Application Security/DevSecOps, знание OWASP Top 10, CI/CD интеграция, Python/C#/C++, владение английским языком.

Qualifications

• Уровень магистратуры в области Computer Science, кибербезопасности, инженерии или смежной области.
• Минимум 3 года опыта в Application Security, кибербезопасности или DevSecOps.
• Свободное владение английским языком.

Responsibilities

• Поддержка и развитие фреймворка безопасной разработки и S-SDLC; предоставление технических рекомендаций командам разработки по безопасному кодированию и устранению уязвимостей.
• Выполнение аудита безопасности приложений и анализа уязвимостей, поддержка remediation.
• Интеграция и оптимизация инструментов безопасности в CI/CD конвейерах; проведение обучающих и ознакомительных сессий.

Skills

SAST

SCA

DAST

Container Security

IaC Scanning

Secrets Detection

Python

C++

C#

OWASP Top 10

Vulnerability Management

Secure SDLC

Education

Master's degree in Computer Science, Cybersecurity, Engineering, or related field

Job description

Описание

Shore provides IT services and IT consulting. The organization’s IT Risk Management team strengthens application security across the software development lifecycle and develops Application Security and DevSecOps capabilities.

Задачи

• Support and enhance the organization's Application Security and Secure SDLC (S-SDLC) framework; Provide technical guidance to development teams on secure coding practices and vulnerability remediation; Perform application security assessments and vulnerability analysis, and support remediation activities; Integrate and optimize security tools within CI/CD pipelines; Deliver security awareness sessions and workshops, and create technical documentation; Monitor application security metrics and contribute to continuous process improvement; Research emerging threats and evaluate new security technologies and solutions; Collaborate with cross-functional teams to improve security practices across the development lifecycle.

Требования

• Master's degree in Computer Science, Cybersecurity, Engineering, or a related field


• At least 3 years of experience in Application Security, Cybersecurity, or DevSecOps


• Strong knowledge of SAST, SCA, DAST, Container Security, IaC Scanning, and Secrets Detection


• Experience integrating security controls into CI/CD pipelines


• Proficiency in one or more programming languages such as Python, C++, or C#


• Solid understanding of OWASP Top 10, vulnerability management, and secure software development practices


• Knowledge of cloud security across public, private, hybrid, or regulated environments


• Experience with technical documentation, developer enablement, and security best practices


• Fluency in English


• Strong analytical, communication, and stakeholder management skills


• Nice to have: French

Условия

No conditions specified