Senior Application Security Engineer

Blip; Porto; Presencial; EUR 45 000 - 65 000; Tempo integral

Resumo da oferta

A leading tech company in Porto is seeking an experienced application security specialist. You will implement security controls and manage tools like Snyk and TruffleHog. The ideal candidate has over 5 years of experience in application security, strong programming skills, and a deep understanding of secure coding practices. The role emphasizes collaboration and a commitment to continuous learning.

Qualificações

• 5+ years application security experience.
• Strong programming skills in multiple languages.
• Hands-on experience with SAST/SCA tools, preferably Snyk.
• Deep understanding of OWASP Top 10 and secure coding.

Responsabilidades

• Drive the implementation of application security controls.
• Administer and optimize Snyk and TruffleHog platforms.
• Design vulnerability remediation workflows.
• Create secure coding guidelines and training.

Conhecimentos

Application security experience

Programming skills in multiple languages

Experience with SAST/SCA tools

Understanding of OWASP Top 10

Cloud security experience

Communication and collaboration

Attention to detail

Formação académica

Bachelor's degree in Computer Science or equivalent experience

Ferramentas

Snyk

TruffleHog

Descrição da oferta de emprego

Overview

Blip is a leading tech company focused on software engineering solutions for sports entertainment. We operate at scale. As part of Flutter Entertainment, we play an essential role in the Group's goal of becoming the global leader in online sports betting and iGaming, developing innovative products and platforms for over 14 million monthly customers worldwide.

We are serious about Tech. We are problem-solvers with big ambitions, keeping a people-first mindset at the core of our work. We prioritize flexibility as we strive to deliver the best technological products and tackle the greatest industry challenges.

Recognizing that everyone brings their own strengths, backgrounds and new perspectives, we empower you to be yourself. That uniqueness shapes the culture of belonging we are so proud of.

Responsibilities

The role

Drive the implementation and optimization of application security controls across Flutter's development ecosystem. Serve as technical expert for SAST/SCA tools and vulnerability management processes.

Tool Management (40%)

• Administer and optimize Snyk and TruffleHog platforms
• Develop custom integrations and automation
• Create and maintain security policies and rules
• Monitor tool performance and availability

Vulnerability Management (30%)

• Design vulnerability remediation workflows
• Perform vulnerability analysis and risk assessment
• Create remediation guidance for development teams
• Track and report on vulnerability metrics

Developer Enablement (20%)

• Create secure coding guidelines and training
• Support security champion program
• Conduct security reviews and consultations
• Build security tools and libraries

Innovation (10%)

• Research new security tools and techniques
• Contribute to open source security projects
• Develop proof-of-concepts for process improvements

Qualifications

What You’ll Bring

• 5+ years application security experience
• Strong programming skills in multiple languages
• Hands-on experience with SAST/SCA tools (Snyk preferred)
• Deep understanding of OWASP Top 10 and secure coding
• Experience with cloud security (AWS preferred)
• Bachelor's degree in Computer Science or equivalent experience
• Technical expertise and problem-solving
• Communication and collaboration
• Self-direction and initiative
• Continuous learning mindset
• Attention to detail

Equal opportunities

At Blip, we are committed to creating a diverse and inclusive workplace. We strongly encourage people from all backgrounds, ways of thinking, and working to apply. We are committed to including everyone regardless of their race, disability, age, gender identity, sexual orientation, and religion. Everyone brings different perspectives and experiences; you don’t have to meet all the requirements listed to apply for this role.

If you need any adjustments to apply for the position and to ensure this role aligns with your needs, please send an email to [e-mail].