Python AppSec Engineer | Automate & Fortify CI/CD (Remote)

AgileEngine, LLC.; Aveiro; Hybrid; EUR 98,000 - 152,000; Full time

Benefits offered by this job

Professional growth

Competitive USD-based compensation

Exciting projects

Flextime – remote and office options

Job summary

AgileEngine is seeking a Python Application Security Engineer to automate security controls and improve vulnerability management across CI/CD pipelines. You will implement SAST/DAST/SCA gates and collaborate with development teams to embed secure coding practices.

Ideal candidates have 3–5 years of commercial software engineering experience, strong Python scripting ability, and hands-on work with CI/CD tooling and vulnerability scoring frameworks. Remote-friendly, with hybrid options in Portugal.

Qualifications

• 3–5 years of commercial software engineering experience.
• Proficient in Python for automation and scripting.
• Experience with CI/CD orchestration tools and vulnerability scoring frameworks.
• AppSec tooling experience or security architecture background.
• Ability to work with minimal supervision on complex scripting and integration tasks.

Responsibilities

• Integrate SAST, DAST, and SCA gates into CI/CD pipelines.
• Tune security scanning tools to reduce false positives and improve alert accuracy.
• Develop automated hardened baselines and secure coding patterns.
• Provide code-level remediation guidance in Java and Python with product teams.

Skills

Software engineering experience (3-5 y

Python automation

CI/CD tooling

Vulnerability scoring frameworks

AppSec tooling / security architecture

Independent work

Tools

AppSec tooling

SAST/DAST/SCA

Job description

AgileEngine is seeking a Python Application Security Engineer to automate security controls and improve vulnerability management across CI/CD pipelines. You will implement SAST/DAST/SCA gates and collaborate with development teams to embed secure coding practices.

Ideal candidates have 3–5 years of commercial software engineering experience, strong Python scripting ability, and hands-on work with CI/CD tooling and vulnerability scoring frameworks. Remote-friendly, with hybrid options in Portugal.