Senior AppSec Engineer & DevSecOps Leader

Enfint; Lisboa; Presencial; EUR 70 000 - 90 000; Tempo integral

Resumo da oferta

Extia is recruiting a Senior Application Security Engineer to lead security strategy and mentor engineers. You will promote secure practices across development teams and shape the S-SDLC roadmap in a dynamic, international IT environment.

Key responsibilities include guiding secure coding, integrating SAST/DAST/SCA into CI/CD, and driving continuous improvement with measurable KPIs. Strong leadership and communication are essential.

Qualificações

• Extia seeks a leader with strong AppSec expertise to drive security strategy.
• Experience mentoring developers and guiding secure SDLC practices.
• Proven ability to integrate security controls into CI/CD pipelines and promote secure coding.
• Solid understanding of OWASP Top 10 and cloud security.
• Proactive, autonomous and improvement-oriented mindset.

Responsabilidades

• Contribute to the application security strategy and roadmap within the organization.
• Mentor and support junior Application Security Engineers, promoting knowledge sharing and best practices.
• Drive continuous improvement of the Secure Software Development Lifecycle (S-SDLC) framework.
• Provide expert-level guidance to development teams on application security topics and secure development practices.
• Lead vulnerability analysis, triage, remediation, and follow-up across applications and services.
• Integrate security tools, including SAST, DAST, SCA, container scanning, IaC scanning, and secrets detection, into CI/CD pipelines.
• Lead security awareness initiatives, workshops, and developer training sessions.
• Develop and maintain security documentation, standards, and best practice guidelines.
• Define, monitor, and optimize security metrics, including KPIs, KRIs, and OKRs.
• Conduct threat analysis and technological watch to identify emerging risks and security trends.
• Propose and prototype innovative security solutions and improvements.
• Support automation and continuous improvement of application security processes and tooling.

Conhecimentos

Leadership

Communication

Mentoring

AppSec

SAST/DAST/SCA

CI/CD security

Python

Threat analysis

OWASP Top 10

Cloud security

DevSecOps

Angular

Ferramentas

SAST tools

DAST tools

SCA tools

Container scanning

IaC scanning

Secrets detection

CI/CD tooling

Descrição da oferta de emprego

Extia is recruiting a Senior Application Security Engineer to lead security strategy and mentor engineers. You will promote secure practices across development teams and shape the S-SDLC roadmap in a dynamic, international IT environment.

Key responsibilities include guiding secure coding, integrating SAST/DAST/SCA into CI/CD, and driving continuous improvement with measurable KPIs. Strong leadership and communication are essential.