Hybrid AppSec Engineer – Porto

SysMatch; Porto; Híbrido; EUR 25 000 - 35 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Exclusive partner discounts

Team-building events

Career development opportunities

Onboarding support

Resumo da oferta

Sysmatch is hiring an Application Security Engineer for a hybrid Porto role. You will define and standardize secure SDLC practices across multiple teams, integrating SAST/DAST/SCA tooling into CI/CD pipelines and leading cloud security across Kubernetes clusters.

You will automate security controls like WAFs and network policies while guiding DevOps on best practices in line with DORA, CIS, and OWASP. The role requires a Bachelor's in CS/Cybersecurity or equivalent experience, strong DevSecOps

Qualificações

• Bachelor's degree or equivalent hands-on experience in security engineering.
• Experience with secure SDLC, threat modeling, and security testing.
• Strong programming/scripting skills: Python, Bash, Java, or Go.
• Knowledge of OWASP Top 10 and ISO 27001.

Responsabilidades

• Define and standardize secure software development life cycles across multiple development teams.
• Integrate and manage security testing tools (SAST, DAST, SCA) within CI/CD pipelines.
• Lead vulnerability management across cloud environments and Kubernetes clusters.
• Maintain and automate infrastructure security controls, including WAFs and network policies.
• Guide development and DevOps teams on security best practices, aligning with DORA, CIS Benchmarks, and OWASP.

Conhecimentos

DevSecOps experience

English communication

Security mindset

Formação académica

Bachelor's degree in Computer Science or Cybersecurity

Equivalent hands-on experience

Ferramentas

Kubernetes

Descrição da oferta de emprego

Sysmatch is hiring an Application Security Engineer for a hybrid Porto role. You will define and standardize secure SDLC practices across multiple teams, integrating SAST/DAST/SCA tooling into CI/CD pipelines and leading cloud security across Kubernetes clusters.

You will automate security controls like WAFs and network policies while guiding DevOps on best practices in line with DORA, CIS, and OWASP. The role requires a Bachelor's in CS/Cybersecurity or equivalent experience, strong DevSecOps