Senior AppSec Engineer — Hybrid Lisbon, Secure Dev Leader

La Fosse; Lisboa; Hybrid; EUR 75,000 - 95,000; Full time

Job summary

La Fosse in Lisbon is seeking an Application Security Engineer to join an engineering-led security function within a growing technology business. This hybrid role combines hands-on security with software development, embedding security throughout the SDLC and helping build secure applications from the ground up.

Three days per week onsite in central Lisbon. You'll work closely with software engineering teams to identify risks, perform reviews of applications and APIs, lead threat modelling,

Qualifications

• Experience in Application Security, Product Security or Software Security Engineering.
• A genuine software engineering or development background, with the ability to write and understand code.
• Experience with programming languages such as Python, Go, Java, JavaScript or C++.
• Strong understanding of secure coding practices and OWASP Top 10.
• Experience with application security testing, such as SAST, DAST and SCA.
• Knowledge of threat modelling, secure architecture and code review.
• Experience working directly with software developers and engineering teams.

Responsibilities

• Work closely with software engineering teams to identify and address application security risks.
• Conduct security reviews of applications, APIs and software architectures.
• Lead or contribute to threat modelling activities and secure design reviews.
• Implement and improve application security tooling, including SAST, DAST and SCA.
• Perform secure code reviews and help identify vulnerabilities within application code.
• Support vulnerability assessment, prioritisation and remediation.
• Develop automation and practical solutions to improve application security.
• Promote secure coding standards and best practices across engineering teams.
• Help integrate security into CI/CD pipelines and development workflows.

Skills

Application Security

Secure coding practices

Threat modelling

SAST/DAST/SCA

CI/CD security

Python

Job description

La Fosse in Lisbon is seeking an Application Security Engineer to join an engineering-led security function within a growing technology business. This hybrid role combines hands-on security with software development, embedding security throughout the SDLC and helping build secure applications from the ground up.

Three days per week onsite in central Lisbon. You'll work closely with software engineering teams to identify risks, perform reviews of applications and APIs, lead threat modelling,