application security engineer in application security

Enfint; Lisboa; Presencial; EUR 70 000 - 90 000; Tempo integral

Resumo da oferta

Extia is recruiting a Senior Application Security Engineer to lead security strategy and mentor engineers. You will promote secure practices across development teams and shape the S-SDLC roadmap in a dynamic, international IT environment.

Key responsibilities include guiding secure coding, integrating SAST/DAST/SCA into CI/CD, and driving continuous improvement with measurable KPIs. Strong leadership and communication are essential.

Qualificações

• Extia seeks a leader with strong AppSec expertise to drive security strategy.
• Experience mentoring developers and guiding secure SDLC practices.
• Proven ability to integrate security controls into CI/CD pipelines and promote secure coding.
• Solid understanding of OWASP Top 10 and cloud security.
• Proactive, autonomous and improvement-oriented mindset.

Responsabilidades

• Contribute to the application security strategy and roadmap within the organization.
• Mentor and support junior Application Security Engineers, promoting knowledge sharing and best practices.
• Drive continuous improvement of the Secure Software Development Lifecycle (S-SDLC) framework.
• Provide expert-level guidance to development teams on application security topics and secure development practices.
• Lead vulnerability analysis, triage, remediation, and follow-up across applications and services.
• Integrate security tools, including SAST, DAST, SCA, container scanning, IaC scanning, and secrets detection, into CI/CD pipelines.
• Lead security awareness initiatives, workshops, and developer training sessions.
• Develop and maintain security documentation, standards, and best practice guidelines.
• Define, monitor, and optimize security metrics, including KPIs, KRIs, and OKRs.
• Conduct threat analysis and technological watch to identify emerging risks and security trends.
• Propose and prototype innovative security solutions and improvements.
• Support automation and continuous improvement of application security processes and tooling.

Conhecimentos

Leadership

Communication

Mentoring

AppSec

SAST/DAST/SCA

CI/CD security

Python

Threat analysis

OWASP Top 10

Cloud security

DevSecOps

Angular

Ferramentas

SAST tools

DAST tools

SCA tools

Container scanning

IaC scanning

Secrets detection

CI/CD tooling

Descrição da oferta de emprego

Описание

Extia is a consulting company specialized in IT and digital sectors. Founded in 2007, it combines performance and workplace well-being and operates internationally with more than 2,500 employees.

Задачи

• Contribute to the application security strategy and roadmap within the organization;
• Mentor and support junior Application Security Engineers, promoting knowledge sharing and best practices;
• Drive continuous improvement of the Secure Software Development Lifecycle (S-SDLC) framework;
• Provide expert-level guidance to development teams on application security topics and secure development practices;
• Lead vulnerability analysis, triage, remediation, and follow-up across applications and services;
• Integrate security tools, including SAST, DAST, SCA, container scanning, IaC scanning, and secrets detection, into CI/CD pipelines;
• Lead security awareness initiatives, workshops, and developer training sessions;
• Develop and maintain security documentation, standards, and best practice guidelines;
• Define, monitor, and optimize security metrics, including KPIs, KRIs, and OKRs;
• Conduct threat analysis and technological watch to identify emerging risks and security trends;
• Propose and prototype innovative security solutions and improvements;
• Support automation and continuous improvement of application security processes and tooling.

Требования

• Strong leadership skills with the ability to manage initiatives independently;
• Excellent communication skills and the ability to explain technical topics to diverse audiences;
• Strong teaching and mentoring abilities for developer enablement;
• Analytical and structured problem-solving mindset;
• Ability to influence and drive adoption of security practices across teams;
• Strong documentation and technical writing skills;
• Proactive, autonomous, and improvement-oriented mindset;
• Strong expertise in application security tools and practices, including SAST, DAST, SCA, container scanning, IaC scanning, and secrets detection;
• Experience integrating security controls into CI/CD pipelines;
• Strong programming skills in Python, C++, C#, or similar languages;
• Solid understanding of OWASP Top 10 and common application vulnerabilities;
• Experience in vulnerability analysis, remediation, and false-positive management;
• Knowledge of cloud security across public, private, hybrid, and regulated environments;
• Familiarity with development frameworks such as Angular, Hadoop, or similar;
• Understanding of secure SDLC and DevSecOps practices.

Условия

No conditions specified