Application Security Engineer - €1.100 - €1.400 A Month

Next Engineering; Setúbal; Hybrid; EUR 12,000 - 16,000; Full time

Benefits offered by this job

Hybrid model

Food allowance

Flex benefits

Other benefits

Job summary

Next Engineering is seeking an Application Security Engineer in Lisbon on a hybrid model. You will promote a strong security culture across development teams and help implement Secure SDLC standards and guidelines.

Ideal candidates have 3–6 years of experience, deep knowledge of OWASP Top 10, and experience with security tools such as Checkmarx. The role offers base salary 1100€–1400€ with food allowance and flexible benefits.

Qualifications

• Experience in software development and/or Application Security (AppSec).
• Strong knowledge of Secure SDLC, Security by Design, and secure coding principles.
• Fluency in French and English is mandatory.

Responsibilities

• Promote a strong Application Security culture across development teams based on OWASP Top 10.
• Define, document, and maintain secure development standards and guidelines (Secure SDLC).
• Support development teams in applying Security by Design principles from early project stages.

Skills

AppSec experience

Secure SDLC

Security by Design

Vulnerability assessment

Communication

Education

Computer Science or related field

Tools

Checkmarx (CxSAST/CxSCA)

CI/CD security tooling

Job description

At Next Engineering, we don’t wait for the future. We build it.

We believe that innovation comes through knowledge and that every project is an opportunity to push boundaries.

We also believe that the next step is yours.

Be our NEXT Application Security Engineer!

WHAT YOU’LL WORK ON:

• Promote a strong Application Security culture across development teams, based on OWASP Top 10 (Web, Mobile, APIs)
• Define, document, and maintain secure development standards and guidelines (Secure SDLC )
• Support development teams in applying Security by Design principles from early project stages
• Collaborate with Agile, DevOps, and engineering teams to implement DevSecOps practices
• Integrate and optimize security tools in CI/CD pipelines (SAST, SCA, DAST, MAST )
• Identify, assess, and support remediation of vulnerabilities and security risks
• Perform source code reviews and security audits to identify risks and improvement opportunities
• Contribute to automation of security controls and development of internal security tooling
• Ensure security across Web, Mobile, and API applications throughout the SDLC
• Promote training, knowledge sharing, and security awareness across teams

YOU MIGHT BE A FIT IF YOU HAVE:

• Studies in Computer Science, Information Security, Cybersecurity, or related field
• Experience in software development and/or Application Security (AppSec)
• Strong knowledge of Secure SDLC , Security by Design , and secure coding principles
• Solid understanding of OWASP Top 10 and CWE
• Experience with security tools such as Checkmarx (CxSAST, CxSCA, CxCodeBashing) or equivalent
• Experience integrating SAST, SCA, DAST, and MAST tools into CI/CD pipelines
• Knowledge of DevSecOps practices and security automation
• Strong communication, collaboration, and training skills
• Strong analytical thinking and problem-solving abilities
• Proactive, autonomous, and team-oriented mindset
• Fluency in both French and English is mandatory

Want to join us in Lisbon on a hybrid model ?

Do you have 3–6 years of experience ?

Then this is what we have for you: 1100€–1400€ (base salary) + Food Allowance + Flex Benefits + other current benefits

Don’t wait either. Join Next!