Security Engineer — Hybrid (Lisbon or Porto)

iTRTech Group; Lisboa; Hybrid; EUR 36,000 - 39,000; Full time

Job summary

iTRTech Group seeks a Security Engineer for a hybrid role in Lisbon or Porto. You will join a fast-moving team to strengthen security across Unified Commerce and Client Care platforms, with two onsite days per week.

The ideal candidate has 4+ years in security engineering, solid OWASP knowledge, cloud and DevOps exposure, and fluent English. The position offers a competitive €3,200–€3,500 gross monthly salary and centralized benefits.

Qualifications

• At least 4 years of Security Engineering experience in digital or e-commerce environments.
• Strong information security foundations for web/extranet/intranet environments.
• Hands-on with web app security, vulnerability scanning, penetration testing, and incident response.
• OWASP Top 10, secure coding, and web/mobile security practices.
• Experience with DevOps tools (GitLab, SonarQube, Snyk, AWS IAM policies).
• Cloud familiarity (AWS, Azure, or GCP) focusing on secure architecture.
• Java and JavaScript development with secure coding.

Responsibilities

• Act as the primary contact for IT security topics across teams.
• Deploy, maintain, and improve security components with policy compliance.
• Coordinate penetration tests, vulnerability scans, and reviews; support remediation.
• Work with DevOps/QA to integrate automated security testing in CI/CD and hardening.
• Participate in security audits; document controls and incident management.
• Provide training and guidance to internal teams and partners.

Skills

InfoSec fundamentals

Web app security

Vulnerability testing

Penetration testing

Incident response

DevOps tools

Cloud security

Secure coding

Java/JavaScript

Education

Bachelor’s or Master’s in CS/SE

Tools

GitLab

SonarQube

Snyk

OIDC

OpenFGA

AWS IAM

Job description

iTRTech Group seeks a Security Engineer for a hybrid role in Lisbon or Porto. You will join a fast-moving team to strengthen security across Unified Commerce and Client Care platforms, with two onsite days per week.

The ideal candidate has 4+ years in security engineering, solid OWASP knowledge, cloud and DevOps exposure, and fluent English. The position offers a competitive €3,200–€3,500 gross monthly salary and centralized benefits.