Security Engineer — Lisbon Onsite (Relocation Support)

Fanan Limited; Lisboa; Hybrid; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Apple hardware ecosystem for work

Annual Bonus

Top-tier Health and Life Insurance

Transportation Budget

Coverflex benefits package

Childcare support

Air Conference

Pension Fund

Urban Sports Club

Meals 100% free

Job summary

Air Apps is seeking a Security Engineer to safeguard applications, infrastructure, and data, collaborating with development, DevOps, and IT teams. You will implement secure coding practices, perform vulnerability scans, and model threats to keep systems resilient against cyber threats.

The role focuses on building a secure SDLC, security monitoring, and proactive risk mitigation, with relocation support for Lisbon-based onsite work, and opportunities to influence product security at scale.

Qualifications

• Around 4+ years of experience in cybersecurity, application security, or security engineering.
• Strong knowledge of secure coding principles, OWASP Top 10, and threat modeling techniques.
• Experience with vulnerability scanning tools (Nessus, Qualys, Burp Suite) and penetration testing methodologies.
• Hands-on experience with SIEM, IDS, and security monitoring tools.
• Proficiency in scripting and automation (Python, Bash, PowerShell) for security tasks.
• Familiarity with cloud security in AWS, Azure, or GCP, including IAM and workload protection.
• Knowledge of encryption protocols, network security, and API security best practices.
• Experience working with DevSecOps, integrating security into CI/CD pipelines.
• Ability to analyze security logs, detect anomalies, and mitigate potential threats.
• Excellent problem-solving skills and ability to communicate security concepts to non-technical stakeholders.

Responsibilities

• Develop and implement threat modeling to identify security risks across applications and infrastructure.
• Conduct vulnerability scanning, penetration testing, and security assessments to detect weaknesses.
• Define and enforce secure coding practices in collaboration with development teams.
• Work with DevOps to integrate security into CI/CD pipelines and automate security testing.
• Monitor and respond to security incidents, conducting root cause analysis and implementing preventative measures.
• Ensure compliance with security standards and regulations (e.g., ISO 27001, GDPR, SOC 2).
• Design and implement identity and access management (IAM) policies, encryption standards, and authentication mechanisms.
• Collaborate with product teams to conduct security reviews of features, APIs, and third-party integrations.
• Develop incident response plans, security documentation, and best practices.
• Stay ahead of emerging threats, vulnerabilities, and security technologies.

Skills

Cybersecurity Experience

Secure Coding

Vulnerability Scanning

Penetration Testing

SIEM & IDS

Scripting (Python/Bash)

Cloud Security

Encryption & IAM

DevSecOps

Threat Modeling

Tools

Nessus

Qualys

Burp Suite

AWS

Azure

GCP

SIEM

Job description

Air Apps is seeking a Security Engineer to safeguard applications, infrastructure, and data, collaborating with development, DevOps, and IT teams. You will implement secure coding practices, perform vulnerability scans, and model threats to keep systems resilient against cyber threats.

The role focuses on building a secure SDLC, security monitoring, and proactive risk mitigation, with relocation support for Lisbon-based onsite work, and opportunities to influence product security at scale.