AppSec Engineer: Threat Modelling & Secure SDLC Specialist

Claranet Portugal; Lisboa; On-site; EUR 42,000 - 64,000; Full time

Job summary

Claranet Portugal is seeking an Application Security Engineer to join our Lisbon-based team. You will assess new applications and major changes, review architectures, and analyze data flows to identify vulnerabilities and mitigations.

You will drive Threat Modelling, Security by Design, and integration of AppSec tooling, while producing clear reports and supporting audits and go/no-go decisions. Strong communication and documentations skills are essential.

Qualifications

• 3–5 years of cybersecurity experience with proven application security experience (Web, Mobile, APIs, Cloud).
• Knowledge of ISO 27001 and OWASP Top 10.
• Hands-on experience with Threat Modelling (STRIDE, LINDDUN or equivalent).
• Strong documentation and communication skills.

Responsibilities

• Supporting application security assessments for new applications and major changes
• Analysing security requirements and reviewing architectures, data flows, interfaces and dependencies
• Identifying vulnerabilities and recommending mitigations
• Running Threat Modelling and embedding Security by Design across the project lifecycle
• Validating implemented controls and issuing security recommendations to support go/no-go decisions
• Producing clear technical reports and tracking findings until they are closed
• Supporting the integration of AppSec tooling (SAST, DAST, SCA, IAST)
• Reporting on risk and maturity indicators, and supporting audits

Skills

Application security

Threat modelling

Documentation

Communication

Education

Cybersecurity degree

Computer Science degree

Computer Engineering degree

Job description

Claranet Portugal is seeking an Application Security Engineer to join our Lisbon-based team. You will assess new applications and major changes, review architectures, and analyze data flows to identify vulnerabilities and mitigations.

You will drive Threat Modelling, Security by Design, and integration of AppSec tooling, while producing clear reports and supporting audits and go/no-go decisions. Strong communication and documentations skills are essential.