Hybrid AppSec Engineer – Porto

SysMatch; Porto; Hybrid; EUR 25,000 - 35,000; Full time

Benefits offered by this job

Exclusive partner discounts

Team-building events

Career development opportunities

Onboarding support

Job summary

Sysmatch is hiring an Application Security Engineer for a hybrid Porto role. You will define and standardize secure SDLC practices across multiple teams, integrating SAST/DAST/SCA tooling into CI/CD pipelines and leading cloud security across Kubernetes clusters.

You will automate security controls like WAFs and network policies while guiding DevOps on best practices in line with DORA, CIS, and OWASP. The role requires a Bachelor's in CS/Cybersecurity or equivalent experience, strong DevSecOps

Qualifications

• Bachelor's degree or equivalent hands-on experience in security engineering.
• Experience with secure SDLC, threat modeling, and security testing.
• Strong programming/scripting skills: Python, Bash, Java, or Go.
• Knowledge of OWASP Top 10 and ISO 27001.

Responsibilities

• Define and standardize secure software development life cycles across multiple development teams.
• Integrate and manage security testing tools (SAST, DAST, SCA) within CI/CD pipelines.
• Lead vulnerability management across cloud environments and Kubernetes clusters.
• Maintain and automate infrastructure security controls, including WAFs and network policies.
• Guide development and DevOps teams on security best practices, aligning with DORA, CIS Benchmarks, and OWASP.

Skills

DevSecOps experience

English communication

Security mindset

Education

Bachelor's degree in Computer Science or Cybersecurity

Equivalent hands-on experience

Tools

Kubernetes

Job description

Sysmatch is hiring an Application Security Engineer for a hybrid Porto role. You will define and standardize secure SDLC practices across multiple teams, integrating SAST/DAST/SCA tooling into CI/CD pipelines and leading cloud security across Kubernetes clusters.

You will automate security controls like WAFs and network policies while guiding DevOps on best practices in line with DORA, CIS, and OWASP. The role requires a Bachelor's in CS/Cybersecurity or equivalent experience, strong DevSecOps