Senior Product Security Engineer - Threat Modeling Red Team

Autodoc Group; Lisboa; On-site; EUR 70,000 - 110,000; Full time

Job summary

Altium is seeking a Senior Product Security Engineer in Lisbon to extend the product security program with a focus on continuous vulnerability discovery and prevention. You will lead threat modeling, security regression testing, and offensive security activities to protect the Altium 365 cloud platform for electronics design.

Responsibilities include designing security regression suites, integrating security into CI/CD, and collaborating with Engineering, Architecture and SRE to embed

Qualifications

• 5+ years in Application / Product Security
• Bachelor's Degree or equivalent of 12 years of work experience
• Strong hands-on experience in Web application security testing, API security, Threat modeling, OWASP Top 10
• Experience with Manual penetration testing, Security regression testing, CI/CD security integration
• Ability to identify business logic vulnerabilities
• Strong understanding of Authentication, authorization, session management; Multi-tenant architectures; Cloud-native systems

Responsibilities

• Security Regression Testing: Design and maintain security regression test suites for critical application flows
• Threat Modeling: Lead threat modeling sessions for existing components and new features, translate threats into test cases and security requirements
• Offensive Security / Red Team Activities: Perform manual and automated security testing; focus on high-impact vulnerabilities; validate exploitability and business impact
• OWASP Top 10-Driven Vulnerability Discovery: Continuously assess platform against OWASP Top 10; go beyond tooling to find context-specific flaws
• Security Assurance for Product Changes: Review features for risks; ensure threat-modeled and regression-tested changes; act as security gatekeeper
• Collaboration & Enablement: Work with Engineering, Architecture, SRE; enable teams with guidance, tooling and secure-by-design practices

Skills

Web security testing

API security

Threat modeling

OWASP Top 10

Penetration testing

CI/CD security

Authentication & Authorization

Multi-tenant security

Cloud-native security

Code reading / software engineering

Education

Bachelor's Degree or equivalent of 12 years of work experience

Job description

Altium is seeking a Senior Product Security Engineer in Lisbon to extend the product security program with a focus on continuous vulnerability discovery and prevention. You will lead threat modeling, security regression testing, and offensive security activities to protect the Altium 365 cloud platform for electronics design.

Responsibilities include designing security regression suites, integrating security into CI/CD, and collaborating with Engineering, Architecture and SRE to embed