Cloud App Security Engineer — Threat Modeling & CI/CD

Enfint; Lisboa; Presencial; EUR 55 000 - 75 000; Tempo integral

Resumo da oferta

Altium Limited, входящая в Renesas Group, ищет специалиста по безопасности приложений и продуктов. Вы будете строить и поддерживать регрессионные тесты безопасности, выявлять уязвимости и работать с инженерными командами.

Ключевые задачи включают интеграцию тестирования в CI/CD, моделирование угроз, охват OWASP Top 10, а также обеспечение безопасной архитектуры и подходов «secure-by-design».

Qualificações

• 5+ Years of experience in Application or Product Security.
• Bachelor’s Degree or equivalent of 12 years of work experience.
• Strong hands-on experience in web application security testing, API security, and threat modelling methodologies.
• Deep understanding of OWASP Top 10.
• Experience with manual penetration testing, security regression testing, and CI/CD security integration.

Responsabilidades

• Build and maintain security regression test suites for critical application flows.
• Ensure fixed vulnerabilities are permanently prevented from recurring.
• Integrate security regression testing into CI/CD pipelines.
• Define coverage targets for security-critical areas, including authentication, access control, APIs, and data flows.
• Lead threat modelling sessions for existing system components, new features, and architectural changes.
• Identify attack surfaces, abuse cases, and trust boundaries.
• Translate threats into test cases, security requirements, and mitigation plans.
• Establish threat modeling as a continuous lifecycle activity.
• Perform manual and automated security testing that simulates real attacker behavior.
• Partner with engineering teams to reproduce issues, prioritize fixes, and validate remediation.
• Continuously assess the platform against OWASP Top 10 categories.
• Discover context-specific vulnerabilities, logic flaws, and abuse paths beyond DAST/SAST tooling.
• Review new features and changes for security risks.
• Ensure product changes are threat-modeled and covered by regression tests.
• Act as a security gatekeeper while enabling teams with guidance and tooling.
• Contribute to secure-by-design practices.
• Support developers in understanding and fixing vulnerabilities.
• Scale security through reusable patterns, automation, and security guidance.

Conhecimentos

Web security testing

Threat modelling

Security regression testing

CI/CD security integration

OWASP Top 10

Formação académica

Bachelor’s Degree or equivalent

Descrição da oferta de emprego

Altium Limited, входящая в Renesas Group, ищет специалиста по безопасности приложений и продуктов. Вы будете строить и поддерживать регрессионные тесты безопасности, выявлять уязвимости и работать с инженерными командами.

Ключевые задачи включают интеграцию тестирования в CI/CD, моделирование угроз, охват OWASP Top 10, а также обеспечение безопасной архитектуры и подходов «secure-by-design».