Lisbon Security Engineer: Threat Modeling & SecOps

Air Apps; Lisboa; Hybrid; EUR 70,000 - 90,000; Full time

Benefits offered by this job

Apple hardware ecosystem for work.

Annual Bonus

Top-tier Health and Life Insurance

Transportation Budget

Coverflex benefits package for meal &

Childcare support

Air Conference

Pension Fund

Urban Sports Club

Meals 100% free

Job summary

Air Apps in Lisbon is seeking a Security Engineer to safeguard applications, infrastructure, and data from threats. You will implement secure coding practices, threat modeling, and vulnerability scanning in close collaboration with DevOps and IT teams.

You will help build a secure development lifecycle, IAM policies, encryption standards, and security reviews of features, APIs, and third‑party integrations, while staying ahead of emerging threats. Relocation support available.

Qualifications

• 4+ years of cybersecurity, application security, or security engineering.
• Strong knowledge of secure coding principles, OWASP Top 10, and threat modeling.
• Experience with vulnerability scanning tools (Nessus, Qualys, Burp Suite) and penetration testing methodologies.
• Hands‑on experience with SIEM, intrusion detection systems, and security monitoring tools.
• Scripting and automation (Python, Bash, PowerShell) for security tasks.
• Familiarity with cloud security in AWS, Azure, or GCP, including IAM and workload protection.
• Knowledge of encryption protocols, network security, and API security best practices.
• Experience with DevSecOps and integrating security into CI/CD pipelines.
• Ability to analyze security logs, detect anomalies, and mitigate potential threats.
• Excellent problem‑solving and ability to communicate security concepts to non-technical stakeholders.

Responsibilities

• Develop threat modeling to identify security risks across applications and infrastructure.
• Conduct vulnerability scanning, penetration testing, and security assessments.
• Define and enforce secure coding practices with development teams.
• Work with DevOps to integrate security into CI/CD pipelines.
• Monitor security incidents and perform root cause analysis.
• Ensure compliance with security standards (ISO 27001, GDPR, SOC 2).
• Design IAM policies, encryption standards, and authentication mechanisms.
• Collaborate with product teams for security reviews of features, APIs, and third‑party integrations.
• Develop incident response plans and security documentation.
• Stay ahead of emerging threats and security technologies.

Skills

Cybersecurity

Security engineering

Threat modeling

Vulnerability scanning

Penetration testing

SIEM

Python scripting

Cloud security

Encryption

DevSecOps

API security

Secure coding

Communication

Tools

Nessus

Qualys

Burp Suite

Job description

Air Apps in Lisbon is seeking a Security Engineer to safeguard applications, infrastructure, and data from threats. You will implement secure coding practices, threat modeling, and vulnerability scanning in close collaboration with DevOps and IT teams.

You will help build a secure development lifecycle, IAM policies, encryption standards, and security reviews of features, APIs, and third‑party integrations, while staying ahead of emerging threats. Relocation support available.