Remote Senior AppSec Engineer | DevSecOps Focus

Devoteam; Lisboa; Presencial; EUR 65 000 - 90 000; Tempo integral

Resumo da oferta

Devoteam Cyber Trust is seeking a Senior Application Security Consultant to strengthen the security posture of modern applications by embedding security throughout the software development lifecycle. You will collaborate with engineering teams to identify, assess, and remediate vulnerabilities while promoting secure development practices and DevSecOps.

This role offers opportunities to advance a security-focused culture in a cloud-native environment, with emphasis on automation, continuous

Qualificações

• 4+ years in Application Security or related role.
• Knowledge of OWASP Top 10, CWE, Secure Design Principles, and web/API vulnerability remediation.
• Experience integrating automated security controls into CI/CD pipelines.
• Ability to read and analyze source code in Java, Python, or Go.
• Working knowledge of cloud security concepts (AWS/Azure/GCP).
• Fluent English (spoken and written).

Responsabilidades

• Drive application security initiatives across the software development lifecycle (SDLC).
• Identify, assess, prioritize, and support remediation of application security vulnerabilities.
• Partner with engineering teams to promote secure coding practices and security-by-design principles.
• Integrate security testing tools and controls into CI/CD pipelines.
• Review source code and provide security recommendations during development.
• Support secure design reviews and threat modeling activities.
• Improve and automate security processes using AppSec and DevSecOps tools.
• Contribute to the evolution of the organization’s application security program.

Conhecimentos

Application Security

CI/CD

Secure Coding

Cloud Security

Java

Python

Go

Jenkins

GitHub Actions

GitLab CI

Ferramentas

SAST

DAST

SCA

Snyk

Semgrep

Checkmarx

SonarQube

OWASP Dependency-Check

OWASP ZAP

Trivy

Descrição da oferta de emprego

Devoteam Cyber Trust is seeking a Senior Application Security Consultant to strengthen the security posture of modern applications by embedding security throughout the software development lifecycle. You will collaborate with engineering teams to identify, assess, and remediate vulnerabilities while promoting secure development practices and DevSecOps.

This role offers opportunities to advance a security-focused culture in a cloud-native environment, with emphasis on automation, continuous