Remote Lead Application Security Engineer

RemoFirst; Portugal; Presencial; EUR 85 000 - 110 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Parental leave

Wellbeing stipend

Remote-first, always

Resumo da oferta

RemoFirst is hiring a security engineer to own offensive security, secure SDLC, cloud security, and API/security for customer-facing identity and AI initiatives. You’ll run internal pentests, coordinate third-party assessments, model threats, review code, and shape secure architectures across AWS, PostgreSQL, MongoDB, and container platforms.

We value hands-on security experience in Python/Java stacks, Auth0/OIDC/SAML familiarity, and the ability to explain risk-based decisions to diverse teams.

Qualificações

• Hands-on application security in a real engineering environment (code review, threat modelling and offensive testing) against services you defend.
• Stack familiarity: Python and Java (Django, FastAPI, Spring Boot); Kafka and RabbitMQ between them and PostgreSQL with MongoDB underneath.
• Strong AWS security experience — IAM, SCPs, EKS, RDS, S3 and least privilege considerations under shipping constraints.
• Experience securing customer-facing identity: Auth0 or equivalent, plus SAML, OIDC and API-based security.
• Ability to explain security decisions in terms of risk and business need.

Responsabilidades

• Run internal penetration tests and vulnerability scans on core services (Python/Django, FastAPI, Java/Spring Boot).
• Coordinate third-party pentests: scope, findings, remediation follow-up.
• Secure SDLC: code review, threat modelling, maintain internal security libraries, guardrails over gates.
• Secure cloud layers: AWS IAM, EKS, RDS, S3; harden containers and Kubernetes; secret management.
• Own authentication architecture: Auth0, SCIM provisioning, OIDC federation with enterprise IdPs; API security and multi-tenant concerns.
• Define guardrails for AI security: data handling for prompts and model pipeline security.

Conhecimentos

Python/Java security

Threat modelling

Code review

Offensive testing

AWS security

Ferramentas

Django

FastAPI

Spring Boot

Auth0

OIDC

SAML

AWS

EKS

PostgreSQL

MongoDB

Kafka

RabbitMQ

Docker

Kubernetes

Terraform

Descrição da oferta de emprego

RemoFirst is hiring a security engineer to own offensive security, secure SDLC, cloud security, and API/security for customer-facing identity and AI initiatives. You’ll run internal pentests, coordinate third-party assessments, model threats, review code, and shape secure architectures across AWS, PostgreSQL, MongoDB, and container platforms.

We value hands-on security experience in Python/Java stacks, Auth0/OIDC/SAML familiarity, and the ability to explain risk-based decisions to diverse teams.