Application Security Engineer — DevSecOps Champion

AdvanceWorks; Lisboa; Híbrido; EUR 70 000 - 95 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Mentorship program

Formal training

Cutting-edge tools

Flexible work

Resumo da oferta

AdvanceWorks is seeking an Application Security Engineer in Lisbon to strengthen the security of software across the full development lifecycle. You will collaborate with Development, Architecture and IT teams to identify risks, implement secure solutions and improve security practices across multiple markets.

The role sits at the intersection of Software Development, Application Security, Architecture and DevSecOps, with responsibilities spanning reviews, threat modelling, vulnerability

Qualificações

• 3+ years of experience in Software Development, Application Security or DevSecOps.
• Strong background in Java/Spring Boot or C#/NET.
• Solid understanding of secure software development principles.
• Experience with OWASP, Secure Coding and vulnerability management.
• Knowledge of OAuth2, OpenID Connect, JWT and API Security.
• Experience with secrets management and secure handling of sensitive data.
• Hands-on security testing and vulnerability assessment.
• Familiarity with tools such as SonarQube, Snyk, Burp Suite, ZAP, Checkmarx, Fortify.

Responsabilidades

• Identify and mitigate application security risks with development and architecture teams.
• Participate in security and architecture reviews, threat modelling and secure design activities.
• Analyse and manage vulnerabilities from code analysis, dependency scanning, container analysis and pentesting.
• Promote OWASP, Secure Coding and security best practices across development teams.
• Deliver security awareness sessions and technical guidance to developers.
• Support DevSecOps by integrating security controls into CI/CD pipelines.
• Define and implement secure authentication, authorisation, API security and data protection measures.

Conhecimentos

Java/Spring Boot

C#/.NET

DevSecOps

OWASP

API Security

Threat modelling

Security testing

Cloud (AWS/Azure)

CI/CD pipelines

Communication

Ferramentas

SonarQube

Snyk

Burp Suite

ZAP

Checkmarx

Fortify

Descrição da oferta de emprego

AdvanceWorks is seeking an Application Security Engineer in Lisbon to strengthen the security of software across the full development lifecycle. You will collaborate with Development, Architecture and IT teams to identify risks, implement secure solutions and improve security practices across multiple markets.

The role sits at the intersection of Software Development, Application Security, Architecture and DevSecOps, with responsibilities spanning reviews, threat modelling, vulnerability