Application Security Engineer — Secure SDLC & DevSecOps

emagine; Lisboa; Híbrido; EUR 55 000 - 75 000; Tempo integral

Resumo da oferta

Emagine is seeking an Application Security Engineer in Portugal to promote secure development and drive security improvements across the SDLC. You will collaborate with Development, Architecture, DevOps, and Cybersecurity to embed security into software design and delivery.

You should bring a strong development background transitioning into security, with hands-on experience in CI/CD, cloud platforms, and security testing.

Qualificações

• Previous experience in software development, followed by application security experience.
• Strong knowledge of secure SDLC, OWASP Top 10, ASVS, and threat modelling.
• Experience with Java/Spring Boot and/or C#/NET/ASP.NET and cloud platforms.

Responsabilidades

• Promote Secure SDLC practices and security-by-design principles.
• Participate in architecture reviews and threat modelling.
• Analyse and prioritise findings from SAST, DAST, vulnerability assessments, and pen tests.
• Support development teams with vulnerability remediation and secure coding.
• Coordinate penetration testing with external partners.
• Integrate security controls into CI/CD pipelines and support DevSecOps initiatives.
• Promote OWASP Top 10, ASVS, and secure coding best practices.

Conhecimentos

Secure SDLC knowledge

Threat modelling

OWASP Top 10

CI/CD / DevSecOps

Ferramentas

SonarQube

Checkmarx

Fortify

Veracode

Snyk

Burp Suite

OWASP ZAP

Descrição da oferta de emprego

Emagine is seeking an Application Security Engineer in Portugal to promote secure development and drive security improvements across the SDLC. You will collaborate with Development, Architecture, DevOps, and Cybersecurity to embed security into software design and delivery.

You should bring a strong development background transitioning into security, with hands-on experience in CI/CD, cloud platforms, and security testing.