Application Security Engineer

This is a fully remote position, open to applicants in Portugal.

📋 Description

• Conduct design and architecture evaluations for new features, recommending security requirements.

• Collaborate with DevOps and engineering teams, providing guidance on security features and best practices in the software development lifecycle (SDLC).

• Leverage static security scanning tools, assess findings, and coordinate remediation efforts.

• Execute ongoing manual security evaluations.

• Analyze the outcomes of external penetration tests and relay suggested fixes to development teams.

• Offer on-demand support regarding application security matters.

• Promote ideas for process enhancements.

• Assist in the evaluation and onboarding of defects reported by third-party security researchers through our Bug Bounty program.

⛳️ Requirements

• 3 to 5 years of experience in the application security domain.

• Bachelor's or Master's degree in a relevant field of expertise.

• Understanding of secure coding best practices and industry standards (such as OWASP) with the capability to apply them across various programming languages.

• Familiarity with SDLC and DevSecOps principles, along with practical experience in their implementation.

• Knowledge and/or hands-on experience in identifying AI threats within a security context.

• Proficiency in using static and dynamic security scanning tools (such as BurpSuite, ZAP, Snyk, or similar technologies).

• Experience with programming languages such as Python is preferred.

• Ability to articulate application security threats and mitigation strategies to both developers and project managers.

• Strong communication skills in both written and verbal English.

• Experience and/or knowledge in securing applications on cloud platforms (AWS, Azure) and within containerized environments (Docker, Kubernetes).

• Participation in Capture The Flag (CTF) challenges and bug bounty initiatives.

🏝️ Benefits

• We hire, promote, and compensate employees based on their ability to fulfill their job responsibilities, regardless of race, color, creed, religion, sex, gender, marital status, national origin, ancestry, age, citizenship, physical or mental disability, sexual orientation, or any other basis protected by applicable law (collectively referred to in our Code of Conduct as “Protected Classes”).

• We have a zero-tolerance policy for employment discrimination in the workplace and are committed to providing reasonable accommodations for identified disabilities or other limitations as mandated by all applicable laws.

• We are an equal opportunity employer and prioritize diversity within our organization.

• We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.