Application Security Engineer / Senior Application Security Engineer

La Fosse; Lisboa; Hybrid; EUR 75,000 - 95,000; Full time

Job summary

La Fosse in Lisbon is seeking an Application Security Engineer to join an engineering-led security function within a growing technology business. This hybrid role combines hands-on security with software development, embedding security throughout the SDLC and helping build secure applications from the ground up.

Three days per week onsite in central Lisbon. You'll work closely with software engineering teams to identify risks, perform reviews of applications and APIs, lead threat modelling,

Qualifications

• Experience in Application Security, Product Security or Software Security Engineering.
• A genuine software engineering or development background, with the ability to write and understand code.
• Experience with programming languages such as Python, Go, Java, JavaScript or C++.
• Strong understanding of secure coding practices and OWASP Top 10.
• Experience with application security testing, such as SAST, DAST and SCA.
• Knowledge of threat modelling, secure architecture and code review.
• Experience working directly with software developers and engineering teams.

Responsibilities

• Work closely with software engineering teams to identify and address application security risks.
• Conduct security reviews of applications, APIs and software architectures.
• Lead or contribute to threat modelling activities and secure design reviews.
• Implement and improve application security tooling, including SAST, DAST and SCA.
• Perform secure code reviews and help identify vulnerabilities within application code.
• Support vulnerability assessment, prioritisation and remediation.
• Develop automation and practical solutions to improve application security.
• Promote secure coding standards and best practices across engineering teams.
• Help integrate security into CI/CD pipelines and development workflows.

Skills

Application Security

Secure coding practices

Threat modelling

SAST/DAST/SCA

CI/CD security

Python

Job description

Application Security Engineer / Senior Application Security Engineer

Location: Lisbon, Portugal – Hybrid (3 days per week onsite)

Salary: €50,000–€75,000 (Engineer) | €75,000–€95,000 (Senior Engineer)

The Opportunity

We are looking for Application Security Engineers to join an established engineering-led security function within a growing technology business.

This is an opportunity to work closely with software engineering teams, embedding security throughout the software development lifecycle and helping build secure applications from the ground up.

The focus is on practical application security engineering, rather than simply operating security tools or managing vulnerabilities. You'll be involved in identifying risks, improving secure development practices and helping engineers build security into the products they deliver.

What You'll Be Doing

• Work closely with software engineering teams to identify and address application security risks.
• Conduct security reviews of applications, APIs and software architectures.
• Lead or contribute to threat modelling activities and secure design reviews.
• Implement and improve application security tooling, including SAST, DAST and SCA.
• Perform secure code reviews and help identify vulnerabilities within application code.
• Support vulnerability assessment, prioritisation and remediation.
• Develop automation and practical solutions to improve application security.
• Promote secure coding standards and best practices across engineering teams.
• Help integrate security into CI/CD pipelines and development workflows.

What We're Looking For

• Experience in Application Security, Product Security or Software Security Engineering.
• A genuine software engineering or development background, with the ability to write and understand code.
• Experience with one or more programming languages such as Python, Go, Java, JavaScript or C++.
• Strong understanding of secure coding practices and common application vulnerabilities, including OWASP Top 10.
• Experience with application security testing, such as SAST, DAST and SCA.
• Knowledge of threat modelling, secure architecture and code review.
• Experience working directly with software developers and engineering teams.

Senior Engineer – Additional Experience

For the senior position, we're particularly interested in candidates who can demonstrate:

• Ownership of application security initiatives across multiple engineering teams.
• Experience defining application security strategy and technical standards.
• Strong technical expertise in secure software design and vulnerability remediation.
• Ability to influence engineering decisions and mentor other engineers.

The Environment

You’ll be joining a technically driven security team where engineering quality is a priority. The expectation is that security professionals understand the technology they are securing and can contribute practical solutions, not simply identify problems.

Three days per week onsite in central Lisbon.