Python AppSec Engineer — Secure Code & CI/CD Automation

AgileEngine, LLC.; Lisboa; Hybrid; EUR 107,000 - 161,000; Full time

Benefits offered by this job

Professional growth

Competitive compensation

Exciting projects

Flextime

Job summary

AgileEngine is seeking a Python Application Security Engineer to automate security controls and embed secure coding practices into software development and cloud workflows. You will architect and deploy AI-enabled security tooling, integrating SAST/DAST/SCA into CI/CD pipelines for secure-from-the-start code.

You will map automated runbooks, implement IaC/Terraform checks, and drive CSPM runtime security across cloud environments while collaborating with engineers on remediation guidance.

Qualifications

• 3+ years of experience combining software engineering, security implementation and/or architecture.
• Strong coding and architectural proficiency in Python (for security automation and scripting).
• Hands-on experience with Wiz, Prisma Cloud or similar tools for CSPM and threat detection.
• IaC/Terraform deployment-time checks and CSPM runtime checks experience.
• Autonomous execution to map out and build automated security runbooks.

Responsibilities

• Engineer and deploy AI-enabled secure code scanning and Golden Images.
• Automate secure coding patterns and integrate with SDLC workflows.
• Architect and integrate SAST/DAST/SCA into enterprise CI/CD pipelines.
• Implement CSPM runtime security to maintain cloud visibility and posture.
• Review complex Java/Python code to provide remediation guidance for engineers.

Skills

Python

Security automation

CI/CD

Cloud security

Automation scripting

Threat modeling

Tools

Wiz

Prisma Cloud

Job description

AgileEngine is seeking a Python Application Security Engineer to automate security controls and embed secure coding practices into software development and cloud workflows. You will architect and deploy AI-enabled security tooling, integrating SAST/DAST/SCA into CI/CD pipelines for secure-from-the-start code.

You will map automated runbooks, implement IaC/Terraform checks, and drive CSPM runtime security across cloud environments while collaborating with engineers on remediation guidance.