Onsite Lisbon Security Engineer – Threat Modeling & IAM

Air Apps; Lisboa; Sur place; EUR 61 000 - 76 000; Plein temps

Avantages offerts par ce poste

relocation assistance

Health and Life Insurance

Annual bonus

Transportation budget

Meal allowances

Pension fund

Urban Sports Club

Meals 100% free

Résumé du poste

Air Apps in Lisbon, Portugal, is seeking an experienced security engineer to design and implement threat modeling, conduct vulnerability assessments, and enforce secure coding practices across applications and infrastructure.

This fully onsite role collaborates with DevOps and product teams, offers relocation support, a rich benefits package, and a compensation range of €61K–€76K per year. Join us to stay ahead of evolving threats in a fast-growing, global startup.

Qualifications

• Around 4+ years of experience in cybersecurity, application security, or security engineering.
• Strong knowledge of secure coding principles, OWASP Top 10, and threat modeling techniques.
• Experience with vulnerability scanning tools and penetration testing methodologies.
• Hands-on experience with SIEM, IDS, and security monitoring tools.
• Proficiency in scripting for security tasks (Python, Bash, PowerShell).
• Familiarity with cloud security in AWS, Azure, or GCP, including IAM and workload protection.
• Knowledge of encryption protocols, network security, and API security best practices.
• Experience with DevSecOps and integrating security into CI/CD pipelines.

Responsabilités

• Develop and implement threat modeling to identify security risks across applications and infrastructure.
• Conduct vulnerability scanning, penetration testing, and security assessments to detect weaknesses.
• Define and enforce secure coding practices in collaboration with development teams.
• Work with DevOps to integrate security into CI/CD pipelines and automate security testing.
• Monitor and respond to security incidents, performing root cause analysis and preventive measures.
• Ensure compliance with security standards and regulations (ISO 27001, GDPR, SOC 2).
• Design and implement IAM policies, encryption standards, and authentication mechanisms.
• Collaborate with product teams to review security of features, APIs, and third-party integrations.
• Develop incident response plans, security documentation, and best practices.

Connaissances

Threat modeling

Secure coding

OWASP Top 10

Vulnerability scanning

Penetration testing

Security monitoring

Python scripting

Bash scripting

PowerShell scripting

Cloud security (AWS/Azure/GCP)

IAM & workload protection

CI/CD security

Encryption protocols

Outils

Nessus

Qualys

Burp Suite

SIEM

IDS

Description du poste

Air Apps in Lisbon, Portugal, is seeking an experienced security engineer to design and implement threat modeling, conduct vulnerability assessments, and enforce secure coding practices across applications and infrastructure.

This fully onsite role collaborates with DevOps and product teams, offers relocation support, a rich benefits package, and a compensation range of €61K–€76K per year. Join us to stay ahead of evolving threats in a fast-growing, global startup.