Senior AppSec Engineer: Shift-Left, API Security & Automation (Lisbon)

Icapital; Lisboa; On-site; EUR 70,000 - 95,000; Full time

Job summary

HireHi is seeking a technically strong Senior Application Security practitioner to own and mature the Secure Design program. You will work with the Head of AppSec to drive shift-left initiatives, review design, and integrate security into CI/CD.

You will own API security, assist with offensive security, and build Python-based automation to scale AppSec capacity. You will collaborate with developers on SAST/SCA remediation, optimize scans, and help define AI-assisted security pipelines and

Qualifications

• Experience in application security and secure software design.
• Strong API security knowledge and experience with modern security controls.
• Familiarity with CI/CD pipelines and integrating security checks.

Responsibilities

• Own and mature the Secure Design program and shift-left initiatives.
• Review design and integrate security into CI/CD pipelines.
• Own API security and assist with offensive security activities.
• Build Python-based automation to scale AppSec capacity.
• Collaborate with developers on SAST/SCA remediation and optimize scans.
• Help define AI-assisted security pipelines.

Skills

Application security

API security

Shift-left initiatives

CI/CD security

Python automation

Offensive security

SAST remediation

SCA remediation

Tools

Python

CI/CD tooling

Job description

HireHi is seeking a technically strong Senior Application Security practitioner to own and mature the Secure Design program. You will work with the Head of AppSec to drive shift-left initiatives, review design, and integrate security into CI/CD.

You will own API security, assist with offensive security, and build Python-based automation to scale AppSec capacity. You will collaborate with developers on SAST/SCA remediation, optimize scans, and help define AI-assisted security pipelines and