Security Engineer for AI-Powered SaaS Apps

Belsoftsolutions; Portugal; A distancia; EUR 50.000 - 75.000; Jornada completa

Descripción de la vacante

Belsoftsolutions is seeking a security-minded engineer to audit SaaS apps and Belsoftsolutions' own products, ensuring deployments are secure before release.

You will run hands-on audits of tools built with Lovable, Bolt, Cursor, v0, and Replit; test authentication, access controls, and API routes; review dependencies; and turn findings into automated checks in DeployReady. Strong JavaScript/TypeScript, Node.js, and OWASP Top 10 knowledge are essential.

Formación

• Solid understanding of the OWASP Top 10.
• Experience reviewing npm packages and dependency risk.
• Ability to explain vulnerabilities to non-security developers.
• Proven track record reporting security issues.

Responsabilidades

• Perform hands-on security audits of SaaS products and apps.
• Test authentication, access control, including IDOR, and API routes.
• Review npm dependencies and supply-chain risk in Node.js projects.
• Assess AI features for prompt injection and data leakage.
• Review Belsoftsolutions' products before release.
• Write findings reports with fixes and retest.
• Turn recurring findings into automated checks in DeployReady.

Conocimientos

JavaScript

TypeScript

Node.js

OWASP Top 10

Security testing

Communication

Herramientas

npm

lockfiles

Supabase

Firebase

Descripción del empleo

Belsoftsolutions is seeking a security-minded engineer to audit SaaS apps and Belsoftsolutions' own products, ensuring deployments are secure before release.

You will run hands-on audits of tools built with Lovable, Bolt, Cursor, v0, and Replit; test authentication, access controls, and API routes; review dependencies; and turn findings into automated checks in DeployReady. Strong JavaScript/TypeScript, Node.js, and OWASP Top 10 knowledge are essential.