Application Security Engineer

LUZA Group; Porto; Presencial; EUR 50 000 - 70 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Remote work when possible

Equipment provided

Benefits plan

Resumo da oferta

Syffer is seeking a Security Engineer to define and standardize S-SDLC across multiple development teams, and to integrate security testing tools into CI/CD pipelines.

You will lead vulnerability management in cloud environments and Kubernetes, maintain security controls such as WAFs, and guide DevOps teams on industry standards like OWASP and ISO 27001. This role offers a hybrid work model and opportunities with a diverse client base.

Qualificações

• Bachelor's degree in Computer Science, Cybersecurity, or equivalent practical experience.
• Experience as a Security Engineer with a focus on Application Security and DevSecOps.
• Hands-on with containerization and orchestration tools.
• Strong programming/scripting skills: Python, Bash, Java, or Go.
• Knowledge of OWASP Top 10 and ISO 27001.
• Fluent in English to communicate with stakeholders.

Responsabilidades

• Define and standardize S-SDLC across multiple development teams.
• Integrate security testing tools (SAST, DAST, SCA) in CI/CD pipelines.
• Lead vulnerability management in cloud environments and Kubernetes clusters.
• Maintain and automate infrastructure security controls, including WAFs and network policies.
• Guide development and DevOps teams on security best practices, aligning with frameworks such as DORA, CIS Benchmarks, and OWASP.
• Support a hybrid work model.

Conhecimentos

Security engineering

DevSecOps

Python

Bash

Java

Go

OWASP Top 10

English fluency

ISO 27001

Formação académica

Bachelor's in CS or Cybersecurity

Ferramentas

Docker

Kubernetes

CI/CD tools

Descrição da oferta de emprego

Syffer is an all-inclusive consulting company focused on talent, tech and innovation. We exist to elevate companies and humans all around the world, making change, from the inside to the outside.

We believe that technology + human kindness positively impacts every community around the world. Our approach is simple, we see a world without borders, and believe in equal opportunities. We are guided by our core principles of spreading positivity, good energy and promote equality and care for others.

Our hiring process is unique! People are selected by their value, education, talent and personality. We dont present ethnicity, religion, national origin, age, gender, sexual orientation or identity.

Its time to burst the bubble, and we will do it together!

What You'll do:

• Define and standardize Secure Software Development Life Cycle (S-SDLC) across multiple development teams;
• Integrate and manage security testing tools (SAST, DAST, SCA) in CI/CD pipelines;
• Lead vulnerability management initiatives in cloud environments and Kubernetes clusters;
• Maintain and automate infrastructure security controls, including WAFs and network policies;
• Guide development and DevOps teams on security best practices, ensuring compliance with frameworks such as DORA, CIS Benchmarks, and OWASP;
• Hybrid work model;

Who You Are:

• Bachelor's degree in Computer Science, Cybersecurity, or equivalent practical experience;
• Solid professional experience as a Security Engineer, with strong focus on Application Security and DevSecOps methodologies;
• Hands-on experience with containerization and orchestration tools;
• Strong programming and scripting skills (e.g., Python, Bash, Java, or Go);
• Knowledge of industry security standards, including OWASP Top 10 and ISO 27001;
• Fluent in Englishto communicate effectively with technical and executive stakeholders;

Nice-to-have:

• Intent to obtain or completion of industry certifications such as CKA (Certified Kubernetes Administrator) or CKS (Certified Kubernetes Security Specialist);
• Strong analytical skills for threat detection and analysis;
• Excellent communication skills to convey technical concepts;
• Proactive approach to aligning security requirements with technological modernization and business goals;

What you'll get:

• Wage according to candidate's professional experience;
• Remote Work whenever possible;
• Delivery of work equipment adjusted to the performance of functions;
• Benefits plan;
  
• And others.

Work together with expert teams on projects of large magnitude and intensity, long term together with our clients, all leaders in their industries.

Are you ready to step into a diverse and inclusive world with us?

Together we will promote uniquess!