AppSec Strategy & Vulnerability Lead

It Group Cybersecurity And Digital Fraud; Braga; On-site; EUR 13,000 - 22,000; Full time

Benefits offered by this job

Food Allowance

Flex Benefits

Health insurance

Training and development plan

Growth opportunities

Dynamic and collaborative work env.

Job summary

It Group Cybersecurity And Digital Fraud is seeking an Application Security Analyst to join our Lisbon/Porto based teams. You will contribute to the AppSec core team and help deploy the Group's security strategy across entities, addressing vulnerabilities and operational security needs.

The role requires mid-level experience (3–6 years) in application security, software development security, and risk-focused security practices, with English mastery and a collaborative, growth-oriented mindset.

Qualifications

• Proven focus on Application Security and secure software development life cycle.
• Ability to identify security requirements, policies, and guidelines and provide operational support to implement them.

Responsibilities

• Contribute to the Application Security Core Team and deployment program.
• Participate in implementing the AppSec strategy across the Group and support entities with their security posture.
• Identify and update AppSec policies, procedures, and guidelines as directed.
• Collaborate with solution providers to fix issues and manage support tickets.
• Lead or participate in Application Security governance committees.
• Report and consolidate metrics and KPIs to assess global AppSec level.

Skills

IT Risk and Cyber Security (AppSec)

Software development, review & testing

Vulnerability Management

Software architecture

CI/CD & DevOps practices

Job description

It Group Cybersecurity And Digital Fraud is seeking an Application Security Analyst to join our Lisbon/Porto based teams. You will contribute to the AppSec core team and help deploy the Group's security strategy across entities, addressing vulnerabilities and operational security needs.

The role requires mid-level experience (3–6 years) in application security, software development security, and risk-focused security practices, with English mastery and a collaborative, growth-oriented mindset.