Senior Applications Security Specialist

COFCO International; Porto; On-site; EUR 70,000 - 90,000; Full time

Job summary

COFCO International seeks a Senior Applications Security Specialist in Porto, Portugal to safeguard enterprise applications across their lifecycle. You will lead security assessments, drive secure-by-design practices, and coordinate remediation with cross-functional teams.

You bring 8+ years in IT security, strong experience with SSDLC, OWASP Top 10, cloud security (Azure), and DevSecOps, and you fluently communicate in English and Portuguese.

Qualifications

• 8+ years of IT experience in cybersecurity, application security, DevOps.
• Experience with enterprise applications, cloud platforms, and software development environments.
• Experience conducting security assessments, vulnerability management, and remediation activities.
• Experience working in regulated or multinational environments.
• Fluent in English and Portuguese, both written and spoken.

Responsibilities

• Establish and monitor application security controls across enterprise systems.
• Drive secure-by-design principles throughout the application lifecycle.
• Coordinate remediation of security issues across IT teams and technology layers.
• Support security integration into CI/CD pipelines and DevSecOps processes.
• Provide practical security guidance to application, development, and operations teams.

Skills

Security governance

SSDLC

DevSecOps

Cloud security (Azure)

Vulnerability management

Cross-functional collaboration

Secure coding principles

8+ years IT experience

Tools

Azure Cloud

CI/CD security

Job description

Select how often (in days) to receive an alert:

Senior Applications Security Specialist

Location: Porto, Porto, Portugal

COFCO International is a global agri-business with a clear vision, strong values and a positive culture, focused on being a leader in the global grains, oilseeds and sugar supply chains. We provide the food the world needs in a responsible way. Headquartered is Geneva, Switzerland, we are ambitious, with the right structures and culture to meet the world's increasing and changing needs. With 11,000+ people in 35 countries, our global portfolio includes assets across the Americas, Europe, Africa, Middle East, and Asia-Pacific. We trade with over 50 nations, while providing farmers unique direct access to the growing Chinese market.

JOB PURPOSE

The Senior Application Security Specialist supports the security of business applications, platforms, and software solutions throughout their lifecycle. The role performs application security assessments, identifies security risks and vulnerabilities, supports remediation activities, and helps ensure security requirements are effectively implemented across applications and their supporting technology environments.

A key aspect of the role is to act as a technical security bridge between Application teams and other IT functions, including Infrastructure, Cloud, DevOps, Identity & Access Management, SOC, and Enterprise Architecture. The role helps ensure that application security is addressed end to end, covering not only the application itself but also the underlying infrastructure, cloud services, operating systems, databases, APIs, identities, networks, containers, and CI/CD pipelines on which applications depend.

The position works across technical teams to identify security gaps spanning multiple technology domains, clarify technical dependencies and ownership, coordinate remediation activities, and support the implementation of end-to-end security controls for enterprise applications.

RESPONSABILITIES

Application Security Governance

• Establish and monitor application security controls across enterprise systems.
• Drive secure-by-design principles throughout the application lifecycle.
• Conduct application security risk assessments.
• Identify, evaluate, and prioritize vulnerabilities and remediation actions.
• Collaborate with application owners and developers to mitigate security risks.

Secure Development & DevSecOps

• Promote secure development practices and SSDLC requirements.
• Support security integration into CI/CD pipelines and DevOps processes.
• Perform or coordinate SAST, DAST, SCA, penetration testing, API security testing, and container security.
• Support remediation of code vulnerabilities and vulnerable third-party components.

Cross-Functional Security Integration

• Act as the security bridge between Applications, Infrastructure, Cloud, DevOps, IAM, SOC, Network, and Architecture teams.
• Assess application security end to end, including infrastructure, cloud, databases, APIs, identities, networks, and other dependencies.
• Coordinate remediation of security issues spanning multiple IT teams and technology layers.
• Support consistent security controls across on-premises, cloud, SaaS, and hybrid environments.

Security Advisory & Collaboration

• Provide practical security guidance to application, development, infrastructure, cloud, and DevOps teams.
• Support projects, upgrades, migrations, and technology initiatives with security expertise.
• Translate security risks and requirements into clear, actionable technical controls across IT teams.

REQUIREMENTS

• 8+ years of relevant IT experience, preferably within cybersecurity, application security, infrastructure, or DevOps.
• Experience with enterprise applications, cloud platforms, and software development environments.
• Experience conducting security assessments, vulnerability management, and remediation activities.
• Experience working in regulated or multinational environments.
• Fluent in English and Portuguese, both written and spoken.

Technical Skills

• Experience in application Security.
• Understanding in Secure Software Development Lifecycle (SSDLC).
• Understanding in OWASP Top 10 and Secure Coding Principles.
• Experience in Vulnerability Management.
• Experience in Azure Cloud environment and Cloud Security.
• Experience in DevSecOps practices.

COFCO International is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, age, national origin, disability status, protected veteran status or any other characteristic protected by law.

Please refer to our Candidate Privacy Notice to know how COFCO collects and processes your personal data during your job application.