AppSec Engineer: Secure Coding & SDLC Leader

Decskill; Portugal; On-site; EUR 30,000 - 45,000; Full time

Job summary

Decskill is growing and seeking a Cyber Engineer to join our security-focused team in Portugal. You will support deployment of code analysis and dependency solutions, participate in SDLC process implementation, and help assess and remediate vulnerabilities across applications.

You will work with developers to apply security controls, monitor performance, and promote secure coding, with a focus on OWASP Top 10 and modern tooling such as Qualys Fortify, Nexus IQ and Kubernetes.

Qualifications

• Familiarity with security principles and best practices for code security.
• Clear understanding of OWASP Top 10 - application security risks.
• Strong problem-solving skills and ability to apply algorithms to real-world tasks.
• Good communication skills in a multi-cultural environment.

Responsibilities

• Support for the deployment of the code analysis and dependency solution.
• Participation in the implementation of SDLC processes.
• Implement & perform security scans (SAST/SCA/DAST (WAS)) and assess/qualify vulnerabilities identified by different sources.
• Collaborate with development teams to identify and mitigate security risks.
• Collaborate with development teams to implement security measures to ensure application/code security.
• You will participate in the implementation of security controls, the measurement of security process performance, and the associated reporting.
• Follow-up of remediation and compliance with due dates.
• Participate in the animation of the AppSec community: Awareness, Best practices, Secure coding.

Job description

Decskill is growing and seeking a Cyber Engineer to join our security-focused team in Portugal. You will support deployment of code analysis and dependency solutions, participate in SDLC process implementation, and help assess and remediate vulnerabilities across applications.

You will work with developers to apply security controls, monitor performance, and promote secure coding, with a focus on OWASP Top 10 and modern tooling such as Qualys Fortify, Nexus IQ and Kubernetes.