Application Security Engineer | Lisbon | Hybrid

Decskill; Lisboa; Presencial; EUR 90 000 - 130 000; Tempo integral

Resumo da oferta

Decskill is seeking an experienced Application Security Engineer to join an international banking environment in Lisbon, Portugal, focusing on embedding security across the software development lifecycle.

The role blends Application Security, DevSecOps, and Secure SDLC leadership, with hands-on mentoring, vulnerability management, and developer coaching to raise security standards across multiple development teams.

Qualificações

• Senior profile with 9+ years in AppSec.
• Experience leading or influencing application security initiatives.
• Strong knowledge of Secure SDLC and DevSecOps practices.

Responsabilidades

• Lead and support application security initiatives
• Drive improvements to the Secure SDLC framework
• Advise development teams on security best practices
• Lead vulnerability analysis and remediation activities
• Deliver security workshops and developer coaching sessions
• Define and monitor security KPIs, KRIs and OKRs
• Research emerging threats and innovative security solutions
• Mentor junior AppSec engineers

Conhecimentos

Application Security

DevSecOps

CI/CD pipelines

OWASP Top 10

Cloud Security

Python

C++

C#

Ferramentas

SAST

DAST

SCA

Container Security Scanning

IaC Security Scanning

CI/CD Integration

Descrição da oferta de emprego

We\'re looking for an experienced Application Security Engineer to join an international banking environment and help drive the evolution of secure development practices across multiple development teams.

This role combines Application Security, DevSecOps, Secure SDLC, technical leadership, and developer enablement, with a strong focus on embedding security throughout the software development lifecycle.

What you\'ll do

• Lead and support application security initiatives
• Drive improvements to the Secure SDLC framework
• Advise development teams on security best practices
• Lead vulnerability analysis and remediation activities
• Deliver security workshops and developer coaching sessions
• Define and monitor security KPIs, KRIs and OKRs
• Research emerging threats and innovative security solutions
• Mentor junior AppSec engineers

What we\'re looking for

• Strong experience in Application Security / DevSecOps

Hands-on expertise with:

• SAST, DAST, SCA
• Container Security Scanning
• IaC Security Scanning
• Experience integrating security controls into CI/CD pipelines
• Solid understanding of OWASP Top 10
• Cloud security knowledge across public, private and hybrid environments
• Development background in Python, C++, C# or similar

Nice to have

• Banking or highly regulated industry experience
• Exposure to Hadoop or Angular environments

Experience

• Senior profile
• 9+ years of overall experience
• Previous experience leading or influencing Application Security initiatives

Interested? Feel free to reach out directly.

#ApplicationSecurity #AppSec #DevSecOps #CyberSecurity #CloudSecurity #OWASP #SAST #DAST #SecureSDLC #TechJobs #LisbonJobs #FinTech #BankingTechnology #HiringNow