Remote Application Security Engineer — CI/CD & Pen Tests

emagine; Portugal; Remote; EUR 45,000 - 65,000; Full time

Benefits offered by this job

Security certifications encouraged

Job summary

Emagine is seeking an Application Security Engineer to join a collaborative project environment. The role involves penetration testing, security assessments, and embedding security tooling into CI/CD pipelines.

You will plan tests on internal apps, produce detailed risk reports, and support development teams with threat modelling and secure design reviews. Strong English and hands-on security tooling experience are essential.

Qualifications

• Proven experience performing penetration tests on web applications and APIs.
• Hands-on with SAST, DAST, and SCA tools and CI/CD integration.
• Working knowledge of Jenkins and pipeline troubleshooting.
• Experience with threat modelling and secure design reviews.
• Strong understanding of OWASP Top 10 and remediation techniques.
• Excellent written and verbal communication for technical and non-technical audiences.

Responsibilities

• Plan and conduct penetration tests on internal apps and deliver detailed reports.
• Produce security assessment reports covering risk, impact, exploit steps, and remediation guidance.
• Integrate SAST/DAST/SCA into CI/CD pipelines and support developers.
• Troubleshoot CI/CD security scanning issues and Jenkins configurations.
• Support threat modelling, security reviews, and pre-release assessments.
• Promote secure development practices and serve as a security partner to engineering.

Skills

Penetration testing

SAST

DAST

SCA

CI/CD pipelines

Jenkins

Threat modelling

Secure design reviews

Security reporting

English communication

Education

Security certifications (OSCP, GWAPT, CEH, CSSLP)

Tools

Jenkins

SAST tools

DAST tools

SCA tools

Python

Bash

Job description

Emagine is seeking an Application Security Engineer to join a collaborative project environment. The role involves penetration testing, security assessments, and embedding security tooling into CI/CD pipelines.

You will plan tests on internal apps, produce detailed risk reports, and support development teams with threat modelling and secure design reviews. Strong English and hands-on security tooling experience are essential.