SECURITY ENGINEER (HYBRID)

iTRTech Group; Lisboa; Hybrid; EUR 36,000 - 39,000; Full time

Job summary

iTRTech Group seeks a Security Engineer for a hybrid role in Lisbon or Porto. You will join a fast-moving team to strengthen security across Unified Commerce and Client Care platforms, with two onsite days per week.

The ideal candidate has 4+ years in security engineering, solid OWASP knowledge, cloud and DevOps exposure, and fluent English. The position offers a competitive €3,200–€3,500 gross monthly salary and centralized benefits.

Qualifications

• At least 4 years of Security Engineering experience in digital or e-commerce environments.
• Strong information security foundations for web/extranet/intranet environments.
• Hands-on with web app security, vulnerability scanning, penetration testing, and incident response.
• OWASP Top 10, secure coding, and web/mobile security practices.
• Experience with DevOps tools (GitLab, SonarQube, Snyk, AWS IAM policies).
• Cloud familiarity (AWS, Azure, or GCP) focusing on secure architecture.
• Java and JavaScript development with secure coding.

Responsibilities

• Act as the primary contact for IT security topics across teams.
• Deploy, maintain, and improve security components with policy compliance.
• Coordinate penetration tests, vulnerability scans, and reviews; support remediation.
• Work with DevOps/QA to integrate automated security testing in CI/CD and hardening.
• Participate in security audits; document controls and incident management.
• Provide training and guidance to internal teams and partners.

Skills

InfoSec fundamentals

Web app security

Vulnerability testing

Penetration testing

Incident response

DevOps tools

Cloud security

Secure coding

Java/JavaScript

Education

Bachelor’s or Master’s in CS/SE

Tools

GitLab

SonarQube

Snyk

OIDC

OpenFGA

AWS IAM

Job description

SECURITY ENGINEER (HYBRID LISBON OR PORTO)

Portuguese company hires for hybrid position

Location: Lisbon (preferred) or Porto, Portugal

Only candidates already based in Portugal will be considered

Work Model: Hybrid — 2 days onsite per week

Language Requirements: Fluent English required; French or other languages are a plus

Seniority: Mid-level (4+ years)

Rate Between €3200 - 3500 RV or unipessoal (gross value)

About The Opportunity

We are looking for a Security Engineer to strengthen the security of Unified Commerce and Client Care solutions. You will collaborate with cybersecurity, development, operations, and partner teams to ensure secure digital platforms and compliance with global security policies.

Responsibilities

• Act as the primary contact for IT security topics, coordinating with cybersecurity teams, business stakeholders, and external partners.
• Deploy, maintain, and improve security components, ensuring compliance with security policies and standards.
• Coordinate penetration tests, vulnerability scans, and security intelligence reviews; support remediation and secure coding practices.
• Work with DevOps and QA teams to integrate automated security testing into CI/CD pipelines and define hardening procedures for web components and middleware.
• Participate in security audits covering data protection and e-commerce requirements; document security controls, processes, and incident management procedures.
• Provide training and technical guidance to internal teams and partners, promoting secure design and continuous security improvement.

Requirements

• At least 4 years of experience as a Security Engineer, preferably in digital, e-commerce, or software environments.
• Strong information security foundations and experience securing Internet, Extranet, and Intranet systems.
• Hands-on experience in web application security, vulnerability scanning, penetration testing, and incident response.
• Solid understanding of OWASP Top 10, secure coding, and web and mobile application security practices.
• Familiarity with DevOps environments and tools or technologies such as GitLab, SonarQube, Snyk, OIDC, OpenFGA, and AWS IAM policies.
• Working knowledge of AWS, Azure, or GCP, focusing on secure architecture and deployment.
• Practical development experience with languages and frameworks such as Java and JavaScript, including writing secure code.
• Bachelor’s or Master’s degree in Computer Science, Software Engineering, or a related field, and fluent English.

Ideal Candidate Profile

An analytical, proactive security professional who can work independently in a fast-paced Agile environment. Comfortable coordinating multinational teams, explaining security risks clearly, and helping developers and operations teams implement practical improvements.

5 Questions for Candidates

• How many years of Security Engineering experience do you have in digital or e-commerce environments?
• Can you describe a web vulnerability you identified and helped remediate?
• How have you integrated automated security testing into CI/CD pipelines?
• What hands-on experience do you have with cloud security, application hardening, and secure coding?
• Are you fluent in English and available for two onsite days per week in Lisbon or Porto, with a rate of €3200–3500?

Keywords

Security Engineering, Application Security, OWASP Top 10, Penetration Testing, Vulnerability Management, DevSecOps, CI/CD, Cloud Security, IAM, Secure Coding, Hardening, Incident Response.

#00359779