AppSec Engineer (Hybrid @ Porto)

KCS iT; Porto; Híbrido; EUR 40 000 - 65 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Free training programs

International projects in Benelux

Hybrid work model

Full Remote projects

Full Onsite projects

Well-being support: nutrition, psy, GP

Resumo da oferta

KCS IT is seeking an Amazing AppSec Engineer to join our Porto team. The role requires at least four years of security experience and hands-on expertise in SAST/ SCA/ DAST, container scanning, IaC scanning, and security tooling within CI/CD pipelines.

Strong Python, C++, or C# skills and a solid grasp of OWASP Top 10 are essential. We offer a hybrid work setup in Porto with opportunities to work remotely or onsite on a variety of client projects, plus training and international exposure in

Qualificações

• At least 4 years of experience in Cybersecurity, Application Security or DevSecOps.
• Strong hands-on experience with SAST, SCA, DAST and Container Image Scanning tools.
• Experience with Infrastructure as Code (IaC) Scanning and Secrets Detection.
• Knowledge of security and quality tool integration within CI/CD pipelines.
• Strong programming skills in Python, C++, C# or similar languages.
• Deep understanding of OWASP Top 10 vulnerabilities and secure development practices.
• Experience performing vulnerability analysis, remediation and false positive management.
• Knowledge of cloud security in private, public, hybrid or regulated environments.
• Experience supporting and advising development teams on application security matters.
• Professional level of English (spoken and written).

Conhecimentos

Cybersecurity

Application Security

DevSecOps

Python

C++

C#

OWASP Top 10

Vulnerability analysis

Remediation

False positive management

Cloud security

CI/CD integration

Mentoring/leadership

English proficiency

Ferramentas

SAST

SCA

DAST

Container image scanning

IaC scanning

Secrets detection

Descrição da oferta de emprego

We’re looking for the special, unique and amazing YOU!

@ KCS IT, we look for the ones that stands out, for those that always wants to be better and fight for it, and for those who has the same values that we do: dedication, energy, integrity, transparency, flexibility, trust, honesty, hard work, proactivity, team work.

At KCS we stand for equality and value diversity. We create a safe, diverse environment where opportunities are equal for everyone! We do not discriminate based on age, ethnicity, sexual orientation, gender, disability or any factor other than merit. All applications with skills for the position are welcome!

We are looking for an Amazing: AppSec Engineer

Seniority: Minimum 4 years

Type of position: Hybrid (in Porto, Portugal)

The amazing you, will have:

• At least 4 years of experience in Cybersecurity, Application Security or DevSecOps.
• Strong hands-on experience with SAST, SCA, DAST and Container Image Scanning tools.
• Experience with Infrastructure as Code (IaC) Scanning and Secrets Detection.
• Knowledge of security and quality tool integration within CI/CD pipelines.
• Strong programming skills in Python, C++, C# or similar languages.
• Deep understanding of OWASP Top 10 vulnerabilities and secure development practices.
• Experience performing vulnerability analysis, remediation and false positive management.
• Knowledge of cloud security in private, public, hybrid or regulated environments.
• Experience supporting and advising development teams on application security matters.
• Professional level of English (spoken and written).

To turn yourself from amazing to unique, you´ll have (plus):

• Previous experience leading or mentoring Application Security initiatives or teams.
• Experience working in an international banking or financial services environment.
• Familiarity with development frameworks such as Hadoop or Angular.
• Knowledge of End-of-Support lifecycle management and security governance practices.
• Experience delivering security workshops, training sessions and technical documentation.

Why should you become part of our family?

• You can develop a career that fits you: your career development is personalized, taking in consideration your needs and goals from a short to long term
• Interesting Challenges Ahead: you can work for several clients from different sectors of activity
• Free training programs: Our training and certification programs in languages, tech, behavior and business will help you to reach your full potential faster
• International projects in Benelux: you can gain international experience in Benelux and balance a new way of living with work
• Type of projects (depending on the project you might find one of this types of projects):
• In hybrid Systems: Is important to balance work with socialization, that´s why a hybrid system works for us and for you
• Full Remote projects: If you want to work while you enjoy the comfort of your home
• Full Onsite projects: if you prefere the company of your colleagues!
• Take care of your well-being: Enjoy our free nutrition, psychologist, general medicine appointments and our yoga and personal training days… all remote!

Who are we?

Founded in 2008 and based in Lisbon, KCS IT is a consulting company in the field of Information Technology and Services, focused on creating value for our clients through three main areas: Consulting, Outsourcing, Innovation and Training. Our commitment to talent development is unmistakable in the recent opening of the Porto, Leiria and Azores hubs, which aims to develop technology for the national and international market. Since 2018 we have been elected one of the 10 major companies in the “Index of Excellence”, an initiative that aims to reward organizations that invest most in the development and satisfaction of their employees.