Application Security Engineer

Claranet limited; Porto; Presencial; EUR 40 000 - 60 000; Tempo integral

Resumo da oferta

Claranet limited is seeking an Application Security Engineer to join their internal team in Porto. The ideal candidate will define secure software development lifecycles and integrate security testing tools into CI/CD pipelines.

The role requires solid experience in application security and knowledge of cloud security standards. A proactive approach and strong communication skills are essential for success in this position.

Join us to thrive in a collaborative and innovative environment!

Qualificações

• Solid professional experience as a Security Engineer focused on Application Security.
• Hands-on experience with containerization and orchestration tools.
• Understanding of industry security standards, like OWASP Top 10 and ISO 27001.

Responsabilidades

• Define and standardize secure software development lifecycles (S-SDLC).
• Integrate and manage security testing tools within CI/CD pipelines.
• Drive vulnerability management across cloud environments.

Conhecimentos

Application Security

DevSecOps methodologies

Containerization

Orchestration tools

Programming (Python, Bash, Java, Go)

Formação académica

Degree in Computer Science or Cybersecurity

Ferramentas

SAST

DAST

SCA

Descrição da oferta de emprego

We're fast learners, hard workers, natural collaborators... and we Make Modern Happen!

Our ambition is to unlock the potential of our digital world so that organisations everywhere can innovate and thrive securely.

We aim to achieve this goal by bringing together the world’s most talented people and the most powerful technologies, combining them to address our customers' challenges and to build something stronger together.

Right now, we are looking for aApplication Security Engineer to integrate our internal team, based in Porto.

Your responsibilities include:

• Define andstandardize secure software development lifecycles (S-SDLC) across multipledevelopment teams.
• Integrateand manage security testing tools (SAST, DAST, SCA) within CI/CD pipelines.
• Drivevulnerability management initiatives across cloud environments and Kubernetesclusters.
• Maintainand automate infrastructure security controls, including WAFs and networkpolicies.
• Guidedevelopment and DevOps teams on security best practices, ensuring compliancewith frameworks like DORA, CIS Benchmarks, and OWASP.

You must have:

• A degree inComputer Science, Cybersecurity, or an equivalent practical background.
• Solidprofessional experience as a Security Engineer, heavily focused on ApplicationSecurity and DevSecOps methodologies.
• Hands-onexperience with containerization and orchestration tools.
• Strongprogramming and scripting skills (such as Python, Bash, Java, or Go).
• Understandingof industry security standards, including OWASP Top 10 and ISO 27001.
• Proficiencyin English to communicate effectively with technical and executivestakeholders.

We value:

• Intentionto or completion of industry certifications like CKA (Certified KubernetesAdministrator) or CKS (Certified Kubernetes Security Specialist).
• A proactiveapproach to learning and adapting to new cloud technologies.
• Stronganalytical thinking for threat detection and analysis.
• Excellentcommunication skills to convey technical concepts.
• A love forchallenges and continuous learning.
• A proactiveapproach to aligning security requirements with technological modernization andbusiness goals.