Application Security Engineer

emagine; Lisboa; Híbrido; EUR 55 000 - 75 000; Tempo integral

Resumo da oferta

Emagine is seeking an Application Security Engineer in Portugal to promote secure development and drive security improvements across the SDLC. You will collaborate with Development, Architecture, DevOps, and Cybersecurity to embed security into software design and delivery.

You should bring a strong development background transitioning into security, with hands-on experience in CI/CD, cloud platforms, and security testing.

Qualificações

• Previous experience in software development, followed by application security experience.
• Strong knowledge of secure SDLC, OWASP Top 10, ASVS, and threat modelling.
• Experience with Java/Spring Boot and/or C#/NET/ASP.NET and cloud platforms.

Responsabilidades

• Promote Secure SDLC practices and security-by-design principles.
• Participate in architecture reviews and threat modelling.
• Analyse and prioritise findings from SAST, DAST, vulnerability assessments, and pen tests.
• Support development teams with vulnerability remediation and secure coding.
• Coordinate penetration testing with external partners.
• Integrate security controls into CI/CD pipelines and support DevSecOps initiatives.
• Promote OWASP Top 10, ASVS, and secure coding best practices.

Conhecimentos

Secure SDLC knowledge

Threat modelling

OWASP Top 10

CI/CD / DevSecOps

Ferramentas

SonarQube

Checkmarx

Fortify

Veracode

Snyk

Burp Suite

OWASP ZAP

Descrição da oferta de emprego

Emagine is seeking an Application Security Engineer to join a collaborative and dynamic project environment in Portugal. This role is ideal for a professional with a strong software development background who has transitioned into Application Security, looking to promote secure development practices and support teams in building secure applications by design. You will work closely with Development, Architecture, DevOps, and Cybersecurity teams to integrate security throughout the software development lifecycle, assess vulnerabilities, and drive remediation and security improvements.

What You'll Be Working On

• Promote Secure SDLC practices and security-by-design principles.
• Participate in architecture reviews and threat modelling.
• Analyse and prioritize findings from SAST, DAST, vulnerability assessments, and penetration tests.
• Support development teams with vulnerability remediation and secure coding.
• Coordinate penetration testing activities with external partners.
• Integrate security controls into CI/CD pipelines and support DevSecOps initiatives.
• Promote OWASP Top 10, ASVS, and secure coding best practices.

What We're Looking For

• Previous experience in Software Development, followed by Application Security experience.
• Strong knowledge of Secure SDLC, OWASP Top 10, OWASP ASVS, and Threat Modelling.
• Experience with Java / Spring Boot and/or C# / .NET / ASP.NET.
• Experience with application security testing and vulnerability management.
• Cloud experience, preferably AWS and/or Azure.
• Experience with CI/CD and DevSecOps practices.
• Strong analytical, communication, and mentoring skills.
• Professional level of English.

Nice to Have

• Experience with Angular, JavaScript, or TypeScript.
• Knowledge of tools such as SonarQube, Checkmarx, Fortify, Veracode, Snyk, Burp Suite, or OWASP ZAP.
• Knowledge of OAuth2, OIDC, JWT, TLS, and secure API design.

Location & Eligibility

• Candidates must be based in Portugal.
• Hybrid working model - 2/3x per week, Lisbon.

About Emagine

At emagine, we value diversity, inclusion, and equal opportunities. We believe that different perspectives drive innovation and create stronger teams, and we are committed to fostering an inclusive environment where everyone can thrive. We work with leading international clients on innovative and high-impact projects, offering opportunities to grow both professionally and personally. If you are interested in this opportunity, we encourage you to apply and become part of a dynamic and forward-thinking environment. To learn more about us, visit our website: www.emagine-consulting.com