Security Engineer (Hybrid)

iTRTech Group; Porto; Hybrid; EUR 36,000 - 39,000; Full time

Job summary

iTRTech Group is seeking a Security Engineer for a hybrid role based in Lisbon or Porto, Portugal. The position requires 4+ years of security engineering experience and strong knowledge of web/app security, with ongoing collaboration across cybersecurity, development, and operations teams.

The role focuses on implementing secure architectures, performing vulnerability assessments, and integrating security testing into CI/CD pipelines.

Qualifications

• 4+ years of Security Engineering experience in digital, e-commerce, or software environments.
• Solid knowledge of OWASP Top 10, secure coding, and web/mobile security practices.
• Experience with DevOps tools and secure deployment architectures.

Responsibilities

• Act as the primary contact for IT security topics with cybersecurity teams and partners.
• Deploy, maintain, and improve security components to align with policies and standards.
• Coordinate penetration tests, vulnerability scans, and security reviews; support remediation and secure coding practices.
• Integrate automated security testing into CI/CD pipelines with DevOps and QA teams.
• Participate in security audits and document controls, processes, and incident response.

Skills

Security Engineering

Web App Security

CI/CD Security

DevOps Collaboration

Manual & Automated Testing

Cloud Security

Education

Bachelor’s or Master’s in CS/SE

Tools

GitLab

SonarQube

Snyk

OIDC/OpenFGA

AWS IAM

Job description

SECURITY ENGINEER (HYBRID LISBON OR PORTO)

Portuguese company hires for hybrid position

📍 Location: Lisbon (preferred) or Porto, Portugal

⚠️ Only candidates already based in Portugal will be considered

💼 Work Model: Hybrid — 2 days onsite per week

🗣️ Language Requirements: Fluent English required; French or other languages are a plus

🕓 Seniority: Mid-level (4+ years)

💲Rate Between €3200 - 3500 RV or unipessoal (gross value)

⚠️ Instructions: Please send your CV in English and make sure to include all skills and experience that match the requirements of the opportunity. This will significantly increase your chances of success.

About the Opportunity

We are looking for a Security Engineer to strengthen the security of Unified Commerce and Client Care solutions. You will collaborate with cybersecurity, development, operations, and partner teams to ensure secure digital platforms and compliance with global security policies.

Responsibilities

• Act as the primary contact for IT security topics, coordinating with cybersecurity teams, business stakeholders, and external partners.
• Deploy, maintain, and improve security components, ensuring compliance with security policies and standards.
• Coordinate penetration tests, vulnerability scans, and security intelligence reviews; support remediation and secure coding practices.
• Work with DevOps and QA teams to integrate automated security testing into CI/CD pipelines and define hardening procedures for web components and middleware.
• Participate in security audits covering data protection and e-commerce requirements; document security controls, processes, and incident management procedures.
• Provide training and technical guidance to internal teams and partners, promoting secure design and continuous security improvement.

Requirements

• At least 4 years of experience as a Security Engineer, preferably in digital, e-commerce, or software environments.
• Strong information security foundations and experience securing Internet, Extranet, and Intranet systems.
• Hands-on experience in web application security, vulnerability scanning, penetration testing, and incident response.
• Solid understanding of OWASP Top 10, secure coding, and web and mobile application security practices.
• Familiarity with DevOps environments and tools or technologies such as GitLab, SonarQube, Snyk, OIDC, OpenFGA, and AWS IAM policies.
• Working knowledge of AWS, Azure, or GCP, focusing on secure architecture and deployment.
• Practical development experience with languages and frameworks such as Java and JavaScript, including writing secure code.
• Bachelor’s or Master’s degree in Computer Science, Software Engineering, or a related field, and fluent English.

Ideal Candidate Profile

An analytical, proactive security professional who can work independently in a fast-paced Agile environment. Comfortable coordinating multinational teams, explaining security risks clearly, and helping developers and operations teams implement practical improvements.

5 Questions for Candidates

1. How many years of Security Engineering experience do you have in digital or e-commerce environments?
2. Can you describe a web vulnerability you identified and helped remediate?
3. How have you integrated automated security testing into CI/CD pipelines?
4. What hands-on experience do you have with cloud security, application hardening, and secure coding?
5. Are you fluent in English and available for two onsite days per week in Lisbon or Porto, with a rate of €3200–3500?

Keywords

Security Engineering, Application Security, OWASP Top 10, Penetration Testing, Vulnerability Management, DevSecOps, CI/CD, Cloud Security, IAM, Secure Coding, Hardening, Incident Response.

#00359779