Senior AppSec Engineer: Secure SDLC & DevSecOps

Expleo; São Domingos de Benfica; Presencial; EUR 55 000 - 90 000; Tempo integral

Resumo da oferta

Expleo is seeking a seasoned Application Security Expert in Portugal to join its engineering and consulting practice. You will define and promote Secure SDLC, lead threat modeling, and help integrate security into CI/CD.

The role requires 5+ years in software development or application architecture with security focus, hands-on experience with OAuth2, OWASP, and cloud deployments (AWS/Azure), and hands-on use of tools like SonarQube, Checkmarx, and Burp Suite.

Qualificações

• 5+ years of experience in software development and/or application architecture with security focus.
• Strong knowledge of OWASP Top 10 and secure coding practices.
• Experience with threat modeling and security reviews.

Responsabilidades

• Define and promote Secure SDLC and Security-by-Design practices.
• Lead threat modeling and security reviews for applications.
• Identify and remediate vulnerabilities from SAST/DAST/IAST and pentests.
• Integrate security controls into CI/CD pipelines for DevSecOps.
• Provide guidance to development teams on secure coding and data protection.

Conhecimentos

OWASP Top 10

OAuth2/OpenID Connect

Java/Spring Boot

C#/ASP.NET

Cloud: AWS/Azure

Security tools: Snyk/Veracode/ZAP

Ferramentas

SonarQube

Checkmarx

Fortify

Veracode

OWASP ZAP

Burp Suite

Trivy

Descrição da oferta de emprego

Expleo is seeking a seasoned Application Security Expert in Portugal to join its engineering and consulting practice. You will define and promote Secure SDLC, lead threat modeling, and help integrate security into CI/CD.

The role requires 5+ years in software development or application architecture with security focus, hands-on experience with OAuth2, OWASP, and cloud deployments (AWS/Azure), and hands-on use of tools like SonarQube, Checkmarx, and Burp Suite.