Global Application Security Engineer — Drive Secure SDLC

Smart Consulting; Lisboa; On-site; EUR 70,000 - 90,000; Full time

Job summary

Smart Consulting in Lisbon, Portugal is seeking an experienced Application Security Engineer to join an international team. You will help define and implement security initiatives, support development teams in remediating vulnerabilities, and embed security into the software development lifecycle.

You will lead security strategies, integrate tools into CI/CD, mentor colleagues, and monitor KPIs while continuously advancing secure practices across the organization.

Qualifications

• At least 3 years of experience in Application Security, Cybersecurity or DevSecOps.
• Practical knowledge of SAST, DAST, SCA, container scanning, IaC scanning and secrets detection.
• Experience integrating security tools into CI/CD pipelines.
• Knowledge of OWASP Top 10 and vulnerability management.

Responsibilities

• Define and drive Application Security strategies, initiatives and roadmaps.
• Improve and maintain the Secure Software Development Lifecycle (S-SDLC).
• Support development teams in identifying, analysing and remediating security vulnerabilities.
• Implement and integrate security tools into CI/CD pipelines.
• Promote security best practices through workshops, training sessions and technical documentation.
• Mentor and support team members, encouraging a strong security culture.
• Monitor security performance through KPIs, KRIs and OKRs.
• Explore emerging technologies and contribute to PoCs.

Skills

Strong communication

Team collaboration

Education

Master's degree or Bac+5

Tools

SAST

DAST

SCA

Container scanning

IaC scanning

Secrets detection

Job description

Smart Consulting in Lisbon, Portugal is seeking an experienced Application Security Engineer to join an international team. You will help define and implement security initiatives, support development teams in remediating vulnerabilities, and embed security into the software development lifecycle.

You will lead security strategies, integrate tools into CI/CD, mentor colleagues, and monitor KPIs while continuously advancing secure practices across the organization.