Senior Secure Design & API Security Engineer

Signify Technology; Lisboa; Presencial; EUR 70 000 - 110 000; Tempo integral

Resumo da oferta

Signify Technology in Portugal is seeking a Senior Application Security practitioner to own security design across the development lifecycle. You will collaborate with the Head of Application Security to mature threat modeling, API security, and secure coding practices.

You will drive security automation in Python, support SAST/SCA, and help embed security early in CI/CD, working with engineering teams to reduce risk while enabling fast, safe delivery.

Qualificações

• Experience in secure design and threat modeling in modern applications.
• Penetration testing experience with API exploitation patterns.
• Strong Python skills for building automation tooling and scripts.
• Familiarity with CI/CD security, design reviews, and secure delivery processes.

Responsabilidades

• Help build and mature Secure Design and Threat Modeling programs with standards and sign-off criteria.
• Drive early security initiatives and embed security in the development lifecycle through design reviews and automation.
• Own API security as a core discipline across services and platforms.
• Support offensive security initiatives across the organization.
• Build and maintain security automation using Python and scalable tooling.
• Collaborate with developers on SAST/SCA remediation and security feedback loop optimization.
• Define escalation paths, SLAs, and accountability structures for vulnerability management.

Conhecimentos

Secure design

Threat modeling

API security

Offensive security

Python automation

CI/CD security

SAST/SCA tooling

Descrição da oferta de emprego

Signify Technology in Portugal is seeking a Senior Application Security practitioner to own security design across the development lifecycle. You will collaborate with the Head of Application Security to mature threat modeling, API security, and secure coding practices.

You will drive security automation in Python, support SAST/SCA, and help embed security early in CI/CD, working with engineering teams to reduce risk while enabling fast, safe delivery.