Product Security Engineer: Build Secure, Cloud-Ready Apps

Keenfinity; Ovar; Hybrid; EUR 50,000 - 80,000; Full time

Benefits offered by this job

Flexible schedule

Health insurance

Training & development

Career progression

Global collaboration

Job summary

Keenfinity in Portugal is seeking a Product Security Engineer (mid-level) to help secure our product portfolio across development stages. You will embed security into product lifecycles, perform threat modeling, and guide DevSecOps practices across teams, including cloud deployments.

Responsibilities include AppSec assessments, vulnerability testing, and automation to scale security processes. You will collaborate with global teams and contribute to ongoing security improvements and

Qualifications

• 3–5 years in product, application, or offensive security.
• Degree in Computer Science, Cybersecurity, or related field, or equivalent experience.
• Hands‑on vulnerability assessment experience.
• AppSec experience including secure code review and SAST/DAST/SCA tooling.
• Experience with threat modeling methodologies (e.g., STRIDE).
• Working knowledge of secure SDLC / DevSecOps and CI/CD security integration.
• Cloud security knowledge, particularly AWS, familiarity with IAM and cloud security best practices.
• Solid understanding of PKI, digital certificates, and applied cryptography.
• Scripting and automation ability (e.g., Python) to build and scale security tooling.

Responsibilities

• Provide security guidance on new products and technologies across the organization.
• Act as the security lead on development projects, embedding security throughout the product.
• Support development teams with DevSecOps practices, integrating security into CI/CD pipelines and fostering a shift-left culture.
• Guide project teams through secure product lifecycle management and provide ongoing security support to the product engineering team.
• Collaborate with engineering teams to perform regular product security assessments and lead threat modeling exercises.
• Perform application security assessments and secure code reviews across web, backend, and native codebases.
• Operate application security tooling (SAST, DAST, SCA), configuring scans and remediation guidance.
• Conduct vulnerability testing and triage, tracking remediation for current and legacy devices and infrastructure.
• Manage security tooling and automation, secure cloud environments (AWS), and secure IaC and cloud CI/CD workflows.
• Respond to vulnerabilities surfaced through threat detection systems and support incident detection and response processes.
• Operate and support internal PKI, certificate issuance, lifecycle management, and related cryptographic services.
• Maintain internal security documentation and standards.

Skills

Vulnerability assessment

Threat modeling

DevSecOps

Python scripting

Cloud security AWS

Secure SDLC

Incident response

Education

Degree in Computer Science or Cybersecurity

Tools

SAST

DAST

SCA

CI/CD tooling

IAM

Job description

Keenfinity in Portugal is seeking a Product Security Engineer (mid-level) to help secure our product portfolio across development stages. You will embed security into product lifecycles, perform threat modeling, and guide DevSecOps practices across teams, including cloud deployments.

Responsibilities include AppSec assessments, vulnerability testing, and automation to scale security processes. You will collaborate with global teams and contribute to ongoing security improvements and