Remote Application Security Engineer — DevSecOps & Kubernetes

LUZA Group; Porto; Híbrido; EUR 50 000 - 70 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Remote work when possible

Equipment provided

Benefits plan

Resumo da oferta

Syffer is seeking a Security Engineer to define and standardize S-SDLC across multiple development teams, and to integrate security testing tools into CI/CD pipelines.

You will lead vulnerability management in cloud environments and Kubernetes, maintain security controls such as WAFs, and guide DevOps teams on industry standards like OWASP and ISO 27001. This role offers a hybrid work model and opportunities with a diverse client base.

Qualificações

• Bachelor's degree in Computer Science, Cybersecurity, or equivalent practical experience.
• Experience as a Security Engineer with a focus on Application Security and DevSecOps.
• Hands-on with containerization and orchestration tools.
• Strong programming/scripting skills: Python, Bash, Java, or Go.
• Knowledge of OWASP Top 10 and ISO 27001.
• Fluent in English to communicate with stakeholders.

Responsabilidades

• Define and standardize S-SDLC across multiple development teams.
• Integrate security testing tools (SAST, DAST, SCA) in CI/CD pipelines.
• Lead vulnerability management in cloud environments and Kubernetes clusters.
• Maintain and automate infrastructure security controls, including WAFs and network policies.
• Guide development and DevOps teams on security best practices, aligning with frameworks such as DORA, CIS Benchmarks, and OWASP.
• Support a hybrid work model.

Conhecimentos

Security engineering

DevSecOps

Python

Bash

Java

Go

OWASP Top 10

English fluency

ISO 27001

Formação académica

Bachelor's in CS or Cybersecurity

Ferramentas

Docker

Kubernetes

CI/CD tools

Descrição da oferta de emprego

Syffer is seeking a Security Engineer to define and standardize S-SDLC across multiple development teams, and to integrate security testing tools into CI/CD pipelines.

You will lead vulnerability management in cloud environments and Kubernetes, maintain security controls such as WAFs, and guide DevOps teams on industry standards like OWASP and ISO 27001. This role offers a hybrid work model and opportunities with a diverse client base.